Warning: Permanently added '[localhost]:48949' (ECDSA) to the list of known hosts.
2022/09/24 23:46:46 fuzzer started
2022/09/24 23:46:46 dialing manager at localhost:38881
syzkaller login: [   44.423909] cgroup: Unknown subsys name 'net'
[   44.555594] cgroup: Unknown subsys name 'rlimit'
2022/09/24 23:47:00 syscalls: 2215
2022/09/24 23:47:00 code coverage: enabled
2022/09/24 23:47:00 comparison tracing: enabled
2022/09/24 23:47:00 extra coverage: enabled
2022/09/24 23:47:00 setuid sandbox: enabled
2022/09/24 23:47:00 namespace sandbox: enabled
2022/09/24 23:47:00 Android sandbox: enabled
2022/09/24 23:47:00 fault injection: enabled
2022/09/24 23:47:00 leak checking: enabled
2022/09/24 23:47:00 net packet injection: enabled
2022/09/24 23:47:00 net device setup: enabled
2022/09/24 23:47:00 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2022/09/24 23:47:00 devlink PCI setup: PCI device 0000:00:10.0 is not available
2022/09/24 23:47:00 USB emulation: enabled
2022/09/24 23:47:00 hci packet injection: enabled
2022/09/24 23:47:00 wifi device emulation: failed to parse kernel version (6.0.0-rc6-next-20220923                                          )
2022/09/24 23:47:00 802.15.4 emulation: enabled
2022/09/24 23:47:00 fetching corpus: 50, signal 27221/29019 (executing program)
2022/09/24 23:47:00 fetching corpus: 100, signal 40186/43543 (executing program)
2022/09/24 23:47:00 fetching corpus: 150, signal 48929/53779 (executing program)
2022/09/24 23:47:00 fetching corpus: 200, signal 55699/61961 (executing program)
2022/09/24 23:47:00 fetching corpus: 250, signal 59678/67334 (executing program)
2022/09/24 23:47:01 fetching corpus: 300, signal 65252/74166 (executing program)
2022/09/24 23:47:01 fetching corpus: 350, signal 69111/79301 (executing program)
2022/09/24 23:47:01 fetching corpus: 400, signal 71419/82924 (executing program)
2022/09/24 23:47:01 fetching corpus: 450, signal 76454/89008 (executing program)
2022/09/24 23:47:01 fetching corpus: 500, signal 80665/94209 (executing program)
2022/09/24 23:47:01 fetching corpus: 550, signal 84434/98992 (executing program)
2022/09/24 23:47:01 fetching corpus: 600, signal 88370/103885 (executing program)
2022/09/24 23:47:01 fetching corpus: 650, signal 91723/108177 (executing program)
2022/09/24 23:47:01 fetching corpus: 700, signal 95044/112399 (executing program)
2022/09/24 23:47:02 fetching corpus: 750, signal 98824/116967 (executing program)
2022/09/24 23:47:02 fetching corpus: 800, signal 100263/119443 (executing program)
2022/09/24 23:47:02 fetching corpus: 850, signal 103106/123135 (executing program)
2022/09/24 23:47:02 fetching corpus: 900, signal 104917/125887 (executing program)
2022/09/24 23:47:02 fetching corpus: 950, signal 107612/129333 (executing program)
2022/09/24 23:47:02 fetching corpus: 1000, signal 109224/131779 (executing program)
2022/09/24 23:47:02 fetching corpus: 1050, signal 113838/136755 (executing program)
2022/09/24 23:47:02 fetching corpus: 1100, signal 115420/139147 (executing program)
2022/09/24 23:47:02 fetching corpus: 1150, signal 116640/141265 (executing program)
2022/09/24 23:47:03 fetching corpus: 1200, signal 118447/143789 (executing program)
2022/09/24 23:47:03 fetching corpus: 1250, signal 120831/146741 (executing program)
2022/09/24 23:47:03 fetching corpus: 1300, signal 121820/148594 (executing program)
2022/09/24 23:47:03 fetching corpus: 1350, signal 122639/150284 (executing program)
2022/09/24 23:47:03 fetching corpus: 1400, signal 124694/152915 (executing program)
2022/09/24 23:47:03 fetching corpus: 1450, signal 126556/155359 (executing program)
2022/09/24 23:47:03 fetching corpus: 1500, signal 129376/158492 (executing program)
2022/09/24 23:47:03 fetching corpus: 1550, signal 130435/160246 (executing program)
2022/09/24 23:47:04 fetching corpus: 1600, signal 132220/162498 (executing program)
2022/09/24 23:47:04 fetching corpus: 1650, signal 133614/164457 (executing program)
2022/09/24 23:47:04 fetching corpus: 1700, signal 135055/166434 (executing program)
2022/09/24 23:47:04 fetching corpus: 1750, signal 136710/168566 (executing program)
2022/09/24 23:47:04 fetching corpus: 1800, signal 139089/171199 (executing program)
2022/09/24 23:47:04 fetching corpus: 1850, signal 140596/173213 (executing program)
2022/09/24 23:47:04 fetching corpus: 1900, signal 142814/175645 (executing program)
2022/09/24 23:47:05 fetching corpus: 1950, signal 144400/177615 (executing program)
2022/09/24 23:47:05 fetching corpus: 2000, signal 145570/179248 (executing program)
2022/09/24 23:47:05 fetching corpus: 2050, signal 147183/181151 (executing program)
2022/09/24 23:47:05 fetching corpus: 2100, signal 148370/182772 (executing program)
2022/09/24 23:47:05 fetching corpus: 2150, signal 149319/184188 (executing program)
2022/09/24 23:47:05 fetching corpus: 2200, signal 150528/185785 (executing program)
2022/09/24 23:47:05 fetching corpus: 2250, signal 151636/187273 (executing program)
2022/09/24 23:47:05 fetching corpus: 2300, signal 152763/188758 (executing program)
2022/09/24 23:47:06 fetching corpus: 2350, signal 153412/189955 (executing program)
2022/09/24 23:47:06 fetching corpus: 2400, signal 153919/191025 (executing program)
2022/09/24 23:47:06 fetching corpus: 2450, signal 154699/192280 (executing program)
2022/09/24 23:47:06 fetching corpus: 2500, signal 155389/193471 (executing program)
2022/09/24 23:47:06 fetching corpus: 2550, signal 156035/194627 (executing program)
2022/09/24 23:47:06 fetching corpus: 2600, signal 157150/196015 (executing program)
2022/09/24 23:47:06 fetching corpus: 2650, signal 158757/197709 (executing program)
2022/09/24 23:47:06 fetching corpus: 2700, signal 159678/198977 (executing program)
2022/09/24 23:47:06 fetching corpus: 2750, signal 160369/200110 (executing program)
2022/09/24 23:47:06 fetching corpus: 2800, signal 161150/201267 (executing program)
2022/09/24 23:47:07 fetching corpus: 2850, signal 161987/202449 (executing program)
2022/09/24 23:47:07 fetching corpus: 2900, signal 162668/203537 (executing program)
2022/09/24 23:47:07 fetching corpus: 2950, signal 164399/205123 (executing program)
2022/09/24 23:47:07 fetching corpus: 3000, signal 165406/206340 (executing program)
2022/09/24 23:47:07 fetching corpus: 3050, signal 166629/207619 (executing program)
2022/09/24 23:47:07 fetching corpus: 3100, signal 167560/208805 (executing program)
2022/09/24 23:47:07 fetching corpus: 3150, signal 168315/209859 (executing program)
2022/09/24 23:47:07 fetching corpus: 3200, signal 169551/211125 (executing program)
2022/09/24 23:47:07 fetching corpus: 3250, signal 170524/212265 (executing program)
2022/09/24 23:47:08 fetching corpus: 3300, signal 171107/213197 (executing program)
2022/09/24 23:47:08 fetching corpus: 3350, signal 172344/214458 (executing program)
2022/09/24 23:47:08 fetching corpus: 3400, signal 173348/215532 (executing program)
2022/09/24 23:47:08 fetching corpus: 3450, signal 173915/216382 (executing program)
2022/09/24 23:47:08 fetching corpus: 3500, signal 174773/217339 (executing program)
2022/09/24 23:47:08 fetching corpus: 3550, signal 176308/218570 (executing program)
2022/09/24 23:47:08 fetching corpus: 3600, signal 176857/219395 (executing program)
2022/09/24 23:47:08 fetching corpus: 3650, signal 177316/220199 (executing program)
2022/09/24 23:47:09 fetching corpus: 3700, signal 177964/221046 (executing program)
2022/09/24 23:47:09 fetching corpus: 3750, signal 179500/222237 (executing program)
2022/09/24 23:47:09 fetching corpus: 3800, signal 180306/223120 (executing program)
2022/09/24 23:47:09 fetching corpus: 3850, signal 180638/223795 (executing program)
2022/09/24 23:47:09 fetching corpus: 3900, signal 181138/224558 (executing program)
2022/09/24 23:47:09 fetching corpus: 3950, signal 181896/225412 (executing program)
2022/09/24 23:47:09 fetching corpus: 4000, signal 182788/226367 (executing program)
2022/09/24 23:47:09 fetching corpus: 4050, signal 183376/227118 (executing program)
2022/09/24 23:47:09 fetching corpus: 4100, signal 184351/227981 (executing program)
2022/09/24 23:47:10 fetching corpus: 4150, signal 185088/228825 (executing program)
2022/09/24 23:47:10 fetching corpus: 4200, signal 185688/229552 (executing program)
2022/09/24 23:47:10 fetching corpus: 4250, signal 186536/230355 (executing program)
2022/09/24 23:47:10 fetching corpus: 4300, signal 187478/231174 (executing program)
2022/09/24 23:47:10 fetching corpus: 4350, signal 188717/232068 (executing program)
2022/09/24 23:47:10 fetching corpus: 4400, signal 189596/232815 (executing program)
2022/09/24 23:47:10 fetching corpus: 4450, signal 190195/233446 (executing program)
2022/09/24 23:47:11 fetching corpus: 4500, signal 191001/234140 (executing program)
2022/09/24 23:47:11 fetching corpus: 4550, signal 191674/234981 (executing program)
2022/09/24 23:47:11 fetching corpus: 4600, signal 192280/235596 (executing program)
2022/09/24 23:47:11 fetching corpus: 4650, signal 192767/236209 (executing program)
2022/09/24 23:47:11 fetching corpus: 4700, signal 193663/236867 (executing program)
2022/09/24 23:47:11 fetching corpus: 4750, signal 194336/237498 (executing program)
2022/09/24 23:47:11 fetching corpus: 4800, signal 194929/238085 (executing program)
2022/09/24 23:47:11 fetching corpus: 4850, signal 195348/238616 (executing program)
2022/09/24 23:47:11 fetching corpus: 4900, signal 195768/239193 (executing program)
2022/09/24 23:47:12 fetching corpus: 4950, signal 196502/239795 (executing program)
2022/09/24 23:47:12 fetching corpus: 5000, signal 197056/240373 (executing program)
2022/09/24 23:47:12 fetching corpus: 5050, signal 197641/240894 (executing program)
2022/09/24 23:47:12 fetching corpus: 5100, signal 198278/241435 (executing program)
2022/09/24 23:47:12 fetching corpus: 5150, signal 198796/241980 (executing program)
2022/09/24 23:47:12 fetching corpus: 5200, signal 199383/242551 (executing program)
2022/09/24 23:47:12 fetching corpus: 5250, signal 199990/243050 (executing program)
2022/09/24 23:47:12 fetching corpus: 5300, signal 200597/243548 (executing program)
2022/09/24 23:47:13 fetching corpus: 5350, signal 201369/244031 (executing program)
2022/09/24 23:47:13 fetching corpus: 5400, signal 202158/244560 (executing program)
2022/09/24 23:47:13 fetching corpus: 5450, signal 202682/245007 (executing program)
2022/09/24 23:47:13 fetching corpus: 5500, signal 203496/245532 (executing program)
2022/09/24 23:47:13 fetching corpus: 5550, signal 204087/245978 (executing program)
2022/09/24 23:47:13 fetching corpus: 5600, signal 204592/246407 (executing program)
2022/09/24 23:47:13 fetching corpus: 5650, signal 205364/246844 (executing program)
2022/09/24 23:47:14 fetching corpus: 5700, signal 205911/247267 (executing program)
2022/09/24 23:47:14 fetching corpus: 5750, signal 206366/247685 (executing program)
2022/09/24 23:47:14 fetching corpus: 5800, signal 206805/248085 (executing program)
2022/09/24 23:47:14 fetching corpus: 5850, signal 207448/248504 (executing program)
2022/09/24 23:47:14 fetching corpus: 5900, signal 207841/248890 (executing program)
2022/09/24 23:47:14 fetching corpus: 5950, signal 208310/249265 (executing program)
2022/09/24 23:47:14 fetching corpus: 6000, signal 208878/249654 (executing program)
2022/09/24 23:47:14 fetching corpus: 6050, signal 209375/250062 (executing program)
2022/09/24 23:47:14 fetching corpus: 6100, signal 210033/250365 (executing program)
2022/09/24 23:47:15 fetching corpus: 6150, signal 210563/250702 (executing program)
2022/09/24 23:47:15 fetching corpus: 6200, signal 211114/250915 (executing program)
2022/09/24 23:47:15 fetching corpus: 6250, signal 211363/250915 (executing program)
2022/09/24 23:47:15 fetching corpus: 6300, signal 211666/250915 (executing program)
2022/09/24 23:47:15 fetching corpus: 6350, signal 212315/250915 (executing program)
2022/09/24 23:47:15 fetching corpus: 6400, signal 212659/250915 (executing program)
2022/09/24 23:47:15 fetching corpus: 6450, signal 213124/250915 (executing program)
2022/09/24 23:47:15 fetching corpus: 6500, signal 213574/250915 (executing program)
2022/09/24 23:47:15 fetching corpus: 6550, signal 213915/250915 (executing program)
2022/09/24 23:47:15 fetching corpus: 6600, signal 214527/250915 (executing program)
2022/09/24 23:47:16 fetching corpus: 6650, signal 214971/250925 (executing program)
2022/09/24 23:47:16 fetching corpus: 6684, signal 215241/250933 (executing program)
2022/09/24 23:47:16 fetching corpus: 6684, signal 215241/250933 (executing program)
2022/09/24 23:47:19 starting 8 fuzzer processes
23:47:19 executing program 0:
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)

23:47:19 executing program 2:
setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, &(0x7f0000000000)={0xfd, {{0x2, 0x4e22, @local}}}, 0x88)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, &(0x7f00000000c0)={0x7, 'nr0\x00', {0xed}, 0x3})
r1 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000100))
recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000140)=@alg, 0x80, &(0x7f0000000400)=[{&(0x7f00000001c0)=""/35, 0x23}, {&(0x7f0000000200)=""/168, 0xa8}, {&(0x7f00000002c0)=""/106, 0x6a}, {&(0x7f0000000340)=""/139, 0x8b}], 0x4, &(0x7f0000000440)=""/147, 0x93}, 0x400021c2)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8983, &(0x7f0000000540)={0x7, 'veth0_to_hsr\x00', {0x1}, 0x4})
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000580)={{0x1, 0x1, 0x18, <r3=>r2, {0x7fffffff}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f00000005c0)={{0x1, 0x1, 0x18, <r4=>r0, {0x7fff}}, './file0\x00'})
getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000600)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000700)=0xe8)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000740)={{0x1, 0x1, 0x18, r4, {r5, 0xffffffffffffffff}}, './file0\x00'})
getsockopt$sock_buf(r1, 0x1, 0x3d, &(0x7f0000000780)=""/135, &(0x7f0000000840)=0x87)
socket$packet(0x11, 0x3, 0x300)
preadv2(r3, &(0x7f0000000940)=[{&(0x7f0000000880)=""/181, 0xb5}], 0x1, 0xffffffff, 0x384, 0x4)
r6 = accept$inet(r3, &(0x7f0000000980)={0x2, 0x0, @local}, &(0x7f00000009c0)=0x10)
getsockopt$IP_SET_OP_GET_FNAME(r6, 0x1, 0x53, &(0x7f0000000a00)={0x8, 0x7, 0x0, 'syz1\x00'}, &(0x7f0000000a40)=0x2c)
r7 = fsmount(r4, 0x1, 0x89)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r7, 0x89fa, &(0x7f0000000b00)={'ip6_vti0\x00', &(0x7f0000000a80)={'ip6tnl0\x00', 0x0, 0x4, 0x9, 0x91, 0x8, 0x18, @ipv4={'\x00', '\xff\xff', @empty}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000, 0x20, 0x7fffffff}})
ioctl$INCFS_IOC_CREATE_FILE(r7, 0xc058671e, &(0x7f0000000f40)={{'\x00', 0x4}, {0xffffffff}, 0x58, 0x0, 0x0, &(0x7f0000000b40)='./file0\x00', &(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)="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", 0x15d, 0x0, &(0x7f0000000d40)={0x2, 0x149, {0x0, 0xc, 0x4c, "10c2257806ef69eb2c2ac5e4edafa76054645ddf8d9d61bdf47266272b20c9d77f360f0c9fc2fba12fb0315bdf0e536e3f6043a4c946aacfed998313796b3a781b8ed2ad375fd7b1f67004c3", 0xf0, "03ac9e0decbfdc08a5d0ef544e09eab65b9a3ebc3e7962c6d37f2ab7e85e9728fe6e6c4b4800f92b85006cef5b6a0397bd66caa0b6f2815cab7d8852b055aef56b1519ced532375cd8226ee04278c5dfffda8ef5bb3b4fdcddc9245581b25377f2a1e6c6f3506cf0903335302473123eee311b66a7c6da124b6352882a6e6ab69e12b1f33704b3883d28be1c4a8e147eebe5bd98fb8b1061adb619bd48c633385841785442aa62308c5dc01e45cc3ac3f3095eadb5474d4783fbef379219db369428601a57bbb2f0ae9a7c2c8ad97bbfda6b2d056d2fc558cab33c13830a92a491371aa62f92c8ab6c051cf43d9f085a"}, 0x76, "f4993aba0345abb2e573b793368f274ddf73662d3721b25a342d3dccc20a6b9e4f9f59e6de32da70f41ed725697bd8da8b8322b6a47c56e63181fdcb4027dc5addb631813d573602df8fb2362209edc639677b56e45e6402348f5469b796ea00dcd9364bf57508dfc970ded8fa9731c7e444837d1fe9"}, 0x1cb})
bind(r2, &(0x7f0000000fc0)=@generic={0xa, "2aaaf2d39c7be963e0b9d54738b252e3b351c2e8432bc92cd726f7c484d166a470cbc71649dab8b75b54123057131f316d1e4585a44707bbba3785fd48c5e14d768b13c05c6f9bf3294297be0fef694394ecac05fdb2854ea9037d26eb8e4b4202b925708327f857c4d7a4651445ea7b7c51c20d54f7c287340f3efd03f5"}, 0x80)

23:47:19 executing program 3:
getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)=""/131, &(0x7f00000000c0)=0x83)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000100)={0x8, 'veth0_to_bridge\x00', {'ip6erspan0\x00'}, 0x5})
r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)={0x19c, r0, 0x10, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x170, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x50, 0x3, "b29c1c973616375ca168a682f9ba1948253f71d84e52d6e04a3a81716b04f72ce9b4c293eeb3cf22f1d598c7d6309b945f5bb79c71f21e30501b16ec1be0fc46f1d2a86f06f0e4d561dcb404"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "ece53e20c4417f4508533e8789a5538e4e3376221524a0ce3a"}}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "6286ee8c57fee09047f40db0ef8a6b36821fdccbc8b304fcdeea4d6a681c04c46d5e46"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x74, 0x3, "2f7253b7731cf904510dbe55b7b9ec9a0028de10a8554eab366f973b5da5f0aebff3d74bda80daa1f600f69c1f20a19cfb7df48f1bb71e206eabdcc522aa19ce945dcf7252e9c3671e989c436264f0517ac4197084389bb485f4fe04b1aa1a339a3035130ec88aa8b3f3985efb602f10"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xbb94}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x80}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000)
clock_gettime(0x0, &(0x7f00000010c0)={<r1=>0x0, <r2=>0x0})
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001000)=[{{&(0x7f0000000480), 0x6e, &(0x7f0000000940)=[{&(0x7f0000000500)=""/129, 0x81}, {&(0x7f00000005c0)=""/252, 0xfc}, {&(0x7f00000006c0)=""/37, 0x25}, {&(0x7f0000000700)=""/89, 0x59}, {&(0x7f0000000780)=""/24, 0x18}, {&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000000880)=""/165, 0xa5}], 0x7, &(0x7f00000009c0)=[@rights={{0x30, 0x1, 0x1, [<r3=>0xffffffffffffffff, 0xffffffffffffffff, <r4=>0xffffffffffffffff, 0xffffffffffffffff, <r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff, 0xffffffffffffffff]}}], 0x30}}, {{&(0x7f0000000a00)=@abs, 0x6e, &(0x7f0000000b80)=[{&(0x7f0000000a80)=""/5, 0x5}, {&(0x7f0000000ac0)=""/154, 0x9a}], 0x2, &(0x7f0000000bc0)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, <r8=>0xffffffffffffffff, 0xffffffffffffffff, <r9=>0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc8}}, {{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000cc0)=""/234, 0xea}, {&(0x7f0000000dc0)=""/74, 0x4a}, {&(0x7f0000000e40)=""/131, 0x83}], 0x3, &(0x7f0000000f40)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x90}}], 0x3, 0x21a0, &(0x7f0000001100)={r1, r2+60000000})
mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x80, &(0x7f0000001140)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {}, 0x2c, {[{@cache_mmap}, {@cache_fscache}], [{@dont_hash}]}})
r12 = dup3(r3, r6, 0x80000)
r13 = syz_genetlink_get_family_id$ipvs(&(0x7f00000012c0), r5)
sendmsg$IPVS_CMD_SET_INFO(r12, &(0x7f00000013c0)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x1b65c864d3e5db1a}, 0xc, &(0x7f0000001380)={&(0x7f0000001300)={0x48, r13, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xb7}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1ff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000081}, 0x5)
io_pgetevents(0x0, 0x9, 0x4, &(0x7f0000001400)=[{}, {}, {}, {}], &(0x7f0000001480)={0x0, 0x3938700}, 0x0)
ioctl$HIDIOCGCOLLECTIONINFO(r8, 0xc0104811, &(0x7f00000014c0)={0x6, 0x9, 0x5, 0xd84a})
r14 = syz_genetlink_get_family_id$batadv(&(0x7f0000001540), r4)
sendmsg$BATADV_CMD_SET_MESH(r7, &(0x7f0000001640)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)={0x4c, r14, 0x10, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x400}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8c05}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xc08f}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000800}, 0xc0)
ioctl$HIDIOCGREPORTINFO(r11, 0xc00c4809, &(0x7f0000001680)={0x1, 0x100, 0x101})
r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001700), r12)
sendmsg$NL80211_CMD_DEL_KEY(r12, &(0x7f00000017c0)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001780)={&(0x7f0000001740)={0x34, r15, 0x300, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xff, 0x76}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY={0x8, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000080)
r16 = accept4$inet(r10, &(0x7f0000001800)={0x2, 0x0, @local}, &(0x7f0000001840)=0x10, 0x800)
fcntl$addseals(r16, 0x409, 0x0)
fcntl$F_GET_RW_HINT(r10, 0x40b, &(0x7f0000001880))

23:47:19 executing program 1:
setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000000)={{0xa, 0x4e24, 0x2, @mcast1, 0x9}, {0xa, 0x4e22, 0x237f, @dev={0xfe, 0x80, '\x00', 0xc}, 0x5}, 0x0, [0x2, 0x2, 0x4, 0x76fb, 0x4, 0x5, 0x8, 0x5]}, 0x5c)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/66, 0x42, 0x0, &(0x7f0000000100)=""/16, 0x10}, &(0x7f0000000180)=0x40)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000001c0)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x0, 0x6}}, './file0\x00'})
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000200)={0x10000008})
chmod(&(0x7f0000000240)='./file0\x00', 0xc8)
r1 = fsmount(r0, 0x1, 0xe)
getsockopt$inet6_tcp_int(r1, 0x6, 0x3, &(0x7f0000000280), &(0x7f00000002c0)=0x4)
epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0)
getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000300), &(0x7f0000000340)=0x8)
getxattr(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)=@known='system.posix_acl_access\x00', &(0x7f0000000400)=""/4096, 0x1000)
setsockopt$inet6_tcp_int(r1, 0x6, 0x10, &(0x7f0000001400)=0x5, 0x4)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000001440)={{0x1, 0x1, 0x18, <r2=>r0, {0x8}}, './file1\x00'})
getsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000001480), &(0x7f00000014c0)=0x4)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000001500)='system.posix_acl_access\x00', 0x0, r3)
syz_mount_image$vfat(&(0x7f0000001540), &(0x7f0000001580)='./file2\x00', 0x7, 0x3, &(0x7f0000001800)=[{&(0x7f00000015c0)="891ae73b89038f76acdad0e17bf30f9b04994b73f203261005c53e5bb8751a617139c3c26e797f0f96a735720054635a57c3b63aa40519ed8fc74ee8d1e67a0ec34f7594f7bffd0d0fbd98fc68a4a626525fae5d2ac6e575f8671bdd7307b2fb217d2b5884326148be5c8dfcfca266995ae555a8e71f3b3a4de117a9887ccae21eb38178bcfcd0db34651fffdab0c47d282836165fc0ac55fb9278af05603a1f5a1687c0cd166eea87bc2148c0b1c680b7a5b7fdfa475a8e3df5e0d5f2e0bd71c088d9b6f13068ad88b7ebcf89946a", 0xcf, 0x81}, {&(0x7f00000016c0)="083b20c42374fba71dfc47e5d9d83aeac9fcbcb4ff9a792546fc55c0d9a8754eb3e46218acb98fc3274697d5e3ea57e913480123fe439aced650873eec0d031f024dfefde7813398450f54c634ac984be1acd78be3a8549a0969bfa4d6efab4b475da71526a7000e4a2e9369ee3e52651013bd5be2ec230996a9bd06dda4f94cc68cbda6bdbd90cda18d285087c857a706f9d3c0330a0fd565e8fb84c9c5cb984b66ab57af959f37bf20705f6201875a", 0xb0, 0x7}, {&(0x7f0000001780)="c118eab14a02f6e1d61e648c8f95b7c1f1438b81a705ce85f6b064db142e6874aa6b2126924711b596df861db9cfc2b195a77ef4d2a4b25453890bd249944f0abbeee77322d618f46aa1358b8ec534abb74963599349d73d62bf0bc01c036f8d74f785e51202b3f891a6554311dbb28b8cbcd367fa0964f89da4bade20", 0x7d, 0x1}], 0x40, &(0x7f0000001880)={[{@nonumtail}, {@shortname_mixed}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'cp1251'}}, {@shortname_win95}], [{@smackfsdef={'smackfsdef', 0x3d, '['}}, {@appraise}]})
r4 = dup(r3)
setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000001900), 0x4)
perf_event_open(&(0x7f0000001940)={0x4, 0x80, 0x8, 0xda, 0xb1, 0x4, 0x0, 0x8, 0x40000, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001, 0x6}, 0x14100, 0x0, 0x5, 0x7, 0x5, 0x5, 0x4f9, 0x0, 0x1, 0x0, 0x1eb}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x9)

[   76.443090] audit: type=1400 audit(1664063239.114:6): avc:  denied  { execmem } for  pid=286 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
23:47:19 executing program 4:
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'ip6tnl0\x00', 0x4}, 0x18)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='veth1_macvtap\x00', 0x10)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f00000000c0))
getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x53, &(0x7f0000000100), &(0x7f0000000140)=0x8)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', <r1=>0x0})
ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f00000007c0)={'sit0\x00', &(0x7f0000000740)={'syztnl0\x00', <r2=>0x0, 0x4, 0x6, 0x2, 0x8, 0x2b, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x700, 0x10, 0x3f, 0x1}})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000a00)={'syztnl0\x00', &(0x7f0000000940)={'syztnl1\x00', <r3=>0x0, 0x1, 0x1, 0x2, 0x0, {{0x1e, 0x4, 0x3, 0x2e, 0x78, 0x68, 0x0, 0x7, 0x29, 0x0, @private=0xa010100, @local, {[@timestamp_prespec={0x44, 0x1c, 0x71, 0x3, 0xc, [{@empty, 0x100}, {@broadcast, 0x7}, {@rand_addr=0x64010100, 0xffffffff}]}, @generic={0x7, 0xa, "b639a85e4f916498"}, @timestamp_addr={0x44, 0x2c, 0x99, 0x1, 0xc, [{@multicast1, 0xfffffffc}, {@remote, 0x4}, {@local, 0x1}, {@local, 0x1}, {@remote, 0x5}]}, @lsrr={0x83, 0x7, 0x3f, [@broadcast]}, @ra={0x94, 0x4}, @ra={0x94, 0x4}]}}}}})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000c00)={'syztnl2\x00', &(0x7f0000000b00)={'syztnl0\x00', <r4=>0x0, 0x8000, 0x7, 0x8, 0xfff, {{0x31, 0x4, 0x0, 0x22, 0xc4, 0x68, 0x0, 0x3, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x16}, @rand_addr=0x64010100, {[@rr={0x7, 0x7, 0x5f, [@dev={0xac, 0x14, 0x14, 0x28}]}, @timestamp_addr={0x44, 0xc, 0xa0, 0x1, 0x9, [{@loopback, 0x8eb}]}, @rr={0x7, 0x13, 0x9e, [@dev={0xac, 0x14, 0x14, 0x3c}, @loopback, @multicast1, @local]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x18, 0x95, 0x0, 0x2, [0xfffffff7, 0xffffff15, 0x15c8, 0x591967dd, 0x6]}, @generic={0x86, 0x8, "7623a6f10c76"}, @cipso={0x86, 0x1b, 0x1, [{0x0, 0xd, "8463852d8fb3b743fa689d"}, {0x2, 0x8, "e135f75a1e41"}]}, @cipso={0x86, 0x48, 0x2, [{0x7, 0x8, "242308d3f80a"}, {0x6, 0x9, "56c1d1b34cdca2"}, {0x1, 0x7, "1322fe1662"}, {0x6, 0x2}, {0x6, 0x7, "acfa80ff14"}, {0x7, 0x2}, {0x1, 0xd, "840c61083f1566c11cfac2"}, {0xb96752e2789728a7, 0x9, "64a02937cf996d"}, {0x5, 0x9, "2ec7c39cdf127d"}]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000cc0)={'syztnl0\x00', &(0x7f0000000c40)={'sit0\x00', <r5=>0x0, 0x4, 0x6, 0x3, 0x8000, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10, 0x20, 0x8, 0x1}})
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000d00)={{{@in6=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in=@broadcast}, 0x0, @in=@private}}, &(0x7f0000000e00)=0xe8)
ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000ec0)={'syztnl2\x00', &(0x7f0000000e40)={'syztnl2\x00', <r7=>0x0, 0x29, 0x8, 0xf7, 0x1f8, 0x30, @ipv4={'\x00', '\xff\xff', @empty}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1, 0x10, 0x4, 0xd4}})
r8 = accept4$packet(r0, &(0x7f0000000f00)={0x11, 0x0, <r9=>0x0}, &(0x7f0000000f40)=0x14, 0x80800)
sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000001240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001200)={&(0x7f0000000f80)={0x244, 0x0, 0x0, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}]}, 0x244}, 0x1, 0x0, 0x0, 0x81}, 0x0)
setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f0000001280)={r5, 0x1, 0x6, @broadcast}, 0x10)
r10 = accept4$bt_l2cap(r0, 0x0, &(0x7f00000012c0), 0x80400)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r10, 0x6612)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000001300)={{0x1, 0x1, 0x18, <r11=>0xffffffffffffffff, {r10}}, './file0\x00'})
ioctl$sock_inet_SIOCDELRT(r11, 0x890c, &(0x7f0000001380)={0x0, {0x2, 0x4e22, @empty}, {0x2, 0x4e22, @loopback}, {0x2, 0x4e24, @loopback}, 0x100, 0x0, 0x0, 0x0, 0x4, &(0x7f0000001340)='veth1_to_hsr\x00', 0x6, 0x101, 0x2f})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r11, 0x89f0, &(0x7f00000016c0)={'ip6tnl0\x00', &(0x7f0000001640)={'ip6_vti0\x00', 0x0, 0x4, 0x7, 0x5, 0xfffffff8, 0x61, @rand_addr=' \x01\x00', @local, 0x20, 0xa0, 0x10000, 0x3ff}})

23:47:19 executing program 5:
prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffe000/0x2000)=nil)
mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000000)=0x80000000, 0x20, 0x4)
mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x6000, 0x2, &(0x7f0000ffa000/0x6000)=nil)
madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xd)
mbind(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, &(0x7f0000000040)=0x7f, 0x6, 0x2)
shmat(0xffffffffffffffff, &(0x7f0000850000/0x4000)=nil, 0x1000)
move_pages(0xffffffffffffffff, 0x8, &(0x7f0000000080)=[&(0x7f0000d82000/0x1000)=nil, &(0x7f0000a04000/0x2000)=nil, &(0x7f0000fe9000/0x14000)=nil, &(0x7f0000c61000/0xe000)=nil, &(0x7f0000cf8000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f00003fd000/0xc00000)=nil, &(0x7f0000970000/0x2000)=nil], &(0x7f00000000c0)=[0x1, 0x4, 0x4, 0x200, 0x80000001], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x2)
r0 = syz_open_dev$vcsa(&(0x7f0000000140), 0x17, 0x400)
mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0)
mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil)
mbind(&(0x7f0000ea9000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000180), 0x2, 0x1)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0, &(0x7f00000001c0)=0x80, &(0x7f0000000200)=@hci, 0x0, 0x800, 0x1}, 0x9)
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil)
shmat(r1, &(0x7f0000fcc000/0x3000)=nil, 0x5000)
mprotect(&(0x7f00006cb000/0x2000)=nil, 0x2000, 0x4)
mbind(&(0x7f0000b0e000/0x1000)=nil, 0x1000, 0x8000, &(0x7f00000002c0)=0x445, 0x6, 0x4)
get_mempolicy(&(0x7f0000000300), &(0x7f0000000340), 0xfffffffeffffffff, &(0x7f00005f7000/0x10000)=nil, 0x1)
mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
mremap(&(0x7f0000e7c000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffb000/0x3000)=nil)

23:47:19 executing program 6:
ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(0xffffffffffffffff, 0xc0a85322, &(0x7f0000000000))
ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f512, &(0x7f00000000c0))
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(0xffffffffffffffff, 0xc0605345, &(0x7f0000000100)={0x0, 0x2, {0x0, 0x3, 0x7fff}, 0x7})
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0bc5310, &(0x7f0000000180))
r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000240), 0x80800)
sendfile(r0, r0, &(0x7f0000000280)=0xa48, 0x6)
r1 = accept4$inet6(r0, &(0x7f00000002c0), &(0x7f0000000300)=0x1c, 0x800)
fsetxattr$trusted_overlay_opaque(r1, &(0x7f0000000340), &(0x7f0000000380), 0x2, 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, &(0x7f00000003c0)={{0xfa, 0xff}, 'port1\x00', 0x5f, 0x10800, 0x0, 0x8, 0x80, 0x85, 0x40000000, 0x0, 0x4})
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000480), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r2, 0x402c5342, &(0x7f00000004c0)={0x1f, 0xbd7, 0x97, {0x5, 0x1}, 0x5, 0x400})
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x8000, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r3, 0xc08c5334, &(0x7f0000000580)={0xff000000, 0xbf, 0x1, 'queue1\x00', 0x5})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000640)={0x8, 0x0, {0x0, 0x3, 0x1ff, 0x2, 0x7}, 0x4})
fsetxattr$security_capability(r0, &(0x7f00000006c0), &(0x7f0000000700)=@v1={0x1000000, [{0x0, 0x747d}]}, 0xc, 0x2)
rmdir(&(0x7f0000000740)='./file0\x00')
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r3, 0x40bc5311, &(0x7f0000000780)={0x7, 0x2, 'client1\x00', 0x3, "285a97df54ac4a9e", "6531e73f99f85b3fa7bd0aa544100164b48d0430fb4524d01794e918999645f4"})
ioctl$sock_SIOCADDDLCI(r3, 0x8980, &(0x7f0000000840)={'veth1_virt_wifi\x00', 0x1000})
r4 = syz_mount_image$iso9660(&(0x7f0000000880), &(0x7f00000008c0)='./file0\x00', 0x7, 0x9, &(0x7f0000001dc0)=[{&(0x7f0000000900)="79fb7576a9b5ecad8a3e406e9e9a5b97d0ab5be806ccf7eed8be70472aaf150c954c1186bb99374a1e6246effef4e210b02a05fefeb7dfcd55d0b6da3ffbe27f8f652daae9503deb81c9f737a41c", 0x4e, 0xfff}, {&(0x7f0000000980)="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", 0x1000, 0xdd23}, {&(0x7f0000001980)="41524d8dbfd0367c3db965f01a49197430f51e9385535f0e3d66ce", 0x1b, 0x10000}, {&(0x7f00000019c0)="5d7d21bb0309167a01815d47f2cd92bbfb3c6d841b504cde79b52a1eabd6c39dc23e1f9dd6d1db45c1364a17e9214d2e6c61a824596aaa7ec5e8079b1f2f4be5fbd564eedea0ad415075295e5b547885259e82efea677d9885", 0x59, 0x7fffffff}, {&(0x7f0000001a40)="acee9d919b33023566f878f04162e2d05b3e316195ff0a41e13cbcdccd5c059373693a4319301b1bc6e48ba35ce9ab0805402739835eec18a772573f9564283508809132c3eb2e5aa14deba5187697e571114c9960c6d30b4d2cbbdbbc2f86e85c370206f48a664e9633344d8d7b8c0a0d319d4c33e708075aff7cadeba84291961a8c5c039c549d214f16908dcb6e710b763594db2f50ca6206ca6419e3ed81630653512061c21f151e5d2c887ded36dee81f285600f131f07d5b1191f1dcb39383e6b95f905c0308dc0505aabdbdf2b1eb70b14c1bcdc092d8b5cc86a00a9eb90f7db54719680241c2c0a9ac4d5a68d01c69d2", 0xf4, 0x7f}, {&(0x7f0000001b40)="956d0a0ec2c53da2bea1418549a24b1b41dcbc6fed7777", 0x17, 0x6}, {&(0x7f0000001b80)="45a106261c6b63b5e872986e29ebf94b6a5af8e7ea0eacf38c8623094b6588a6408bb47f5e7a93b4395efeb16e048d39c42b8d244094412cc88d3ab373343d85f6a2560c3c5d020a96b06d2e87a45131a42fa98c7152df47ae6856c752fc2b8d0dcba3d466bae326e25d5fd2c22308725200b96d7ad3eb4db72a5571ec85cbf1955ffeba6931178a408fbd18a9390261c42bc0184b7275d89323659c9e81a8471950357991ad2e3bdba32b308dc673f9255997a521ffebf259777efd2d1f4a2e53926a8ef36eeea4d6a16665e735c2cdd45f0cf36aacf6754b7bba4b", 0xdc, 0x8}, {&(0x7f0000001c80)="cb7b24d4257f4d4704", 0x9, 0x20}, {&(0x7f0000001cc0)="8f2913121b1c73cb60312065e9de80fb5945be52bde4beabb6753729730d68cf40c5ce6066388175c50a29975055ce4cd8ed4ca0cdd79832a9c1dc1ec6b153024e64fb31d1e3cdd6456d034f3f7282d12f32d3c8fb8f701a6bac2ec6588427687a8e63a095bbae0fc3612dff00343c00db8c2260df83718e3687cee9f676acd9a6e11daa404a7779347b4707b729ee75fa641d10a358af13397071090cf6e42b7a7db1ea0662c866d6f4dd1df4b2a87482757ccc1d89b332d1b6f5d494dd4087c34b7a6fc3ac328a8c4220e5ce9c283b3c8c47f6f6cb1c1e7c35", 0xda, 0x7}], 0x10020, &(0x7f0000001ec0)={[{@dmode={'dmode', 0x3d, 0xa76b}}, {@iocharset={'iocharset', 0x3d, 'cp437'}}, {@utf8}], [{@smackfshat={'smackfshat', 0x3d, '--!^\x03'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'client1\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@obj_type={'obj_type', 0x3d, '*['}}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'veth1_virt_wifi\x00'}}, {@obj_role={'obj_role', 0x3d, '/,/,[\xbf[\xaf[{%-'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}]})
ioctl$FAT_IOCTL_GET_VOLUME_ID(r4, 0x80047213, &(0x7f0000001fc0))

23:47:19 executing program 7:
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
r1 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0)
ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0)
r2 = syz_open_dev$vcsu(&(0x7f0000000080), 0x1, 0x400)
ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r2, 0x8010671f, &(0x7f0000000100)={&(0x7f00000000c0)=""/55, 0x37})
socket$packet(0x11, 0x3, 0x300)
ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f0000000140))
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x84000, 0x0)
ioctl$VFAT_IOCTL_READDIR_SHORT(r3, 0x82307202, &(0x7f00000001c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {}, {0x8, 0x2, 0x8}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40020)
socket$packet(0x11, 0x3, 0x300)
syz_open_dev$loop(&(0x7f0000000500), 0x3, 0x90103)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000540)={0x4}, 0x4)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000600)='net/bnep\x00')
r5 = syz_mount_image$nfs4(&(0x7f0000000640), &(0x7f0000000680)='./file0\x00', 0x9, 0x6, &(0x7f0000001a40)=[{&(0x7f00000006c0)="d139d66c4fa08b31ee38275a8750f5620adcffe94521aec3a473ad005a436a6a359d1d791804ae6f0e0bd2e73755909ce9545561c9315b9bbdd4a798bdd5625b9caeb2fd7ae5e01ee530f0732b13e00622be4500653d60d9e737825f1983920e491f20dc15a336f8dfe71d3edead623d769c3c3eb7f45d0d0d2761b76ff974814700bd2ac7b9260c3eff729816434b4e95e9e3127d9655d3a9b4cb0c122af23ae8f9e4c086cae65cd5352d56ff26bfd801ff33c00d6a621dfceee6cd7a9d3b29d2f97d1c779203db62f7d1c9f6cf39dec62e68417e78d13614f263d08ca674c9f11ada652e6eecf7689edc2eef12b016", 0xf0, 0x1}, {&(0x7f00000007c0)="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", 0x1000, 0x7be94685}, {&(0x7f00000017c0)="0135d2ae9bf6240f7507094788d3975b11b16ce4c4f82d16e496f31ae9fb1946934f0fe699e7879015df99808723236c13893e1bc6c05b0ab0fea5cbc4a140e11a83f43f40fb05ffd9228fdafb33262ba493ddf6779d329279b2e7fa273635b62ba6ec7725dfffef76faf71454d4808198cf051b358891418ae3293f5e2ebcbcc75919269f91807cacdba6ba88e936c5bafd584e44a14de2d13d27894067955cc2a03d96c662c63a8d674651af797bf2e184d039979e69aa7631c0a1245d3e8c0f", 0xc1, 0x1}, {&(0x7f00000018c0)="a6d7d48ef116de86c8e8025e4239412cdcce7fd87ca233ec5e725c3c2cf4f3bde02b582f932f9075d4c1189940cb09987515c8dd93e010fce5e2e7d60a2e6dcbe8985c62e3c7f42e833396e214a5be5eccecfe5808d068688b3cf7bf9c3938dfb44da482a96e398968ee5fa9c247452874b8787cd173543fb059e538c62b20099f7b72c02299821cebc7384780aaea783e5adbcab8b58894553e3f3c5528eef32ac7e8451bc165a62bf944c895afc683f38ea6b84a3314b9f557024b41672e6a841b03be1d455eb11e4e105f99d71ad990d03d7dd1bc818cd856e0436d10e3739102f1", 0xe3, 0x100}, {&(0x7f00000019c0)="d658fcdce07ed4391a84d5a6274c31ae41f56219f62e7b47fcefe25fc9b82b966303aa5ae5a1856ecc45e0258751f50c181a76", 0x33, 0xfffffffffffffe00}, {&(0x7f0000001a00)="2cde51b8a00191612387bb3e32e58771d8f9b4e6224a2205f0fd923cfbdb62840c6caabfe2c90dbd1507b4", 0x2b, 0x4ca4}], 0x3060881, &(0x7f0000001b00)={[{'+'}, {'/dev/autofs\x00'}, {'/dev/loop#\x00'}, {'freezer.state\x00'}, {'(-'}, {'freezer.state\x00'}, {'/dev/autofs\x00'}], [{@obj_user={'obj_user', 0x3d, '/dev/loop#\x00'}}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@appraise}, {@func={'func', 0x3d, 'MODULE_CHECK'}}, {@uid_eq={'uid', 0x3d, 0xee00}}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@pcr={'pcr', 0x3d, 0x27}}, {@uid_eq}, {@obj_type}, {@fscontext={'fscontext', 0x3d, 'root'}}]})
mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0), 0x1000, &(0x7f0000001c40)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@version_L}, {@uname={'uname', 0x3d, '*$8]%)'}}], [{@subj_role={'subj_role', 0x3d, '/+('}}, {@smackfsroot={'smackfsroot', 0x3d, '/dev/autofs\x00'}}]}})
r6 = openat$cgroup_pressure(r4, &(0x7f0000001d00)='cpu.pressure\x00', 0x2, 0x0)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4000002, 0x10, r4, 0x0)
syz_io_uring_submit(r7, 0x0, &(0x7f0000001d80)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, &(0x7f0000001d40), 0x1, 0x0, 0x1}, 0x5)
fchown(r6, 0xee00, 0x0)

[   77.788058] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   77.790569] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   77.793519] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   77.794828] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   77.797859] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   77.802121] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   77.802763] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   77.812761] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   77.816767] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   77.818161] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   77.872348] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   77.873740] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   77.875276] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   77.877386] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   77.879702] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   77.882007] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[   77.883520] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   77.884967] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   77.886337] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[   77.888494] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   77.890085] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   77.892046] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[   77.894609] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[   77.897775] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   77.899169] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   77.900443] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[   77.903163] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[   77.907516] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[   77.917682] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[   77.918544] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   77.918991] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   77.920852] Bluetooth: hci0: HCI_REQ-0x0c1a
[   77.922626] Bluetooth: hci1: HCI_REQ-0x0c1a
[   77.925391] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   77.927028] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   77.929131] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   77.930764] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[   77.932093] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   77.933461] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   77.934654] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[   77.940854] Bluetooth: hci4: HCI_REQ-0x0c1a
[   77.945491] Bluetooth: hci6: HCI_REQ-0x0c1a
[   77.951220] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   77.958165] Bluetooth: hci3: HCI_REQ-0x0c1a
[   77.973260] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   77.975717] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   77.977898] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[   77.978037] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   77.986188] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[   77.987038] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[   77.988047] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   77.989020] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   77.990043] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   77.994846] Bluetooth: hci7: HCI_REQ-0x0c1a
[   77.997339] Bluetooth: hci5: HCI_REQ-0x0c1a
[   78.017623] Bluetooth: hci2: HCI_REQ-0x0c1a
[   80.000967] Bluetooth: hci3: command 0x0409 tx timeout
[   80.001863] Bluetooth: hci1: command 0x0409 tx timeout
[   80.002500] Bluetooth: hci0: command 0x0409 tx timeout
[   80.003076] Bluetooth: hci6: command 0x0409 tx timeout
[   80.003685] Bluetooth: hci4: command 0x0409 tx timeout
[   80.064402] Bluetooth: hci2: command 0x0409 tx timeout
[   80.065153] Bluetooth: hci5: command 0x0409 tx timeout
[   80.065794] Bluetooth: hci7: command 0x0409 tx timeout
[   82.048359] Bluetooth: hci4: command 0x041b tx timeout
[   82.048975] Bluetooth: hci6: command 0x041b tx timeout
[   82.049564] Bluetooth: hci0: command 0x041b tx timeout
[   82.050112] Bluetooth: hci1: command 0x041b tx timeout
[   82.050833] Bluetooth: hci3: command 0x041b tx timeout
[   82.112785] Bluetooth: hci7: command 0x041b tx timeout
[   82.113835] Bluetooth: hci5: command 0x041b tx timeout
[   82.114383] Bluetooth: hci2: command 0x041b tx timeout
[   84.096388] Bluetooth: hci3: command 0x040f tx timeout
[   84.097041] Bluetooth: hci1: command 0x040f tx timeout
[   84.097957] Bluetooth: hci0: command 0x040f tx timeout
[   84.098572] Bluetooth: hci6: command 0x040f tx timeout
[   84.099172] Bluetooth: hci4: command 0x040f tx timeout
[   84.161005] Bluetooth: hci2: command 0x040f tx timeout
[   84.161803] Bluetooth: hci5: command 0x040f tx timeout
[   84.162425] Bluetooth: hci7: command 0x040f tx timeout
[   86.144310] Bluetooth: hci4: command 0x0419 tx timeout
[   86.144944] Bluetooth: hci6: command 0x0419 tx timeout
[   86.145569] Bluetooth: hci0: command 0x0419 tx timeout
[   86.146124] Bluetooth: hci1: command 0x0419 tx timeout
[   86.146716] Bluetooth: hci3: command 0x0419 tx timeout
[   86.208355] Bluetooth: hci7: command 0x0419 tx timeout
[   86.208951] Bluetooth: hci5: command 0x0419 tx timeout
[   86.209821] Bluetooth: hci2: command 0x0419 tx timeout
[  132.853779] audit: type=1326 audit(1664063295.525:7): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=3807 comm="syz-executor.0" exe="/syz-executor.0" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f33580b2b19 code=0x0
[  132.904625] audit: type=1326 audit(1664063295.576:8): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=3807 comm="syz-executor.0" exe="/syz-executor.0" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f33580b2b19 code=0x0
[  132.955875] audit: type=1326 audit(1664063295.627:9): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=3807 comm="syz-executor.0" exe="/syz-executor.0" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f33580b2b19 code=0x0
[  133.006579] audit: type=1326 audit(1664063295.678:10): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=3807 comm="syz-executor.0" exe="/syz-executor.0" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f33580b2b19 code=0x0
[  133.057644] audit: type=1326 audit(1664063295.729:11): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=3807 comm="syz-executor.0" exe="/syz-executor.0" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f33580b2b19 code=0x0
[  133.108615] audit: type=1326 audit(1664063295.780:12): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=3807 comm="syz-executor.0" exe="/syz-executor.0" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f33580b2b19 code=0x0
[  133.161258] audit: type=1326 audit(1664063295.832:13): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=3807 comm="syz-executor.0" exe="/syz-executor.0" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f33580b2b19 code=0x0
[  134.533723] =======================================================
[  134.533723] WARNING: The mand mount option has been deprecated and
[  134.533723]          and is ignored by this kernel. Remove the mand
[  134.533723]          option from the mount to silence this warning.
[  134.533723] =======================================================
[  134.543984] FAT-fs (loop1): Unrecognized mount option "nnonumtail=1" or missing value
[  134.551007] audit: type=1400 audit(1664063297.222:14): avc:  denied  { open } for  pid=3906 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[  134.568683] FAT-fs (loop1): Unrecognized mount option "nnonumtail=1" or missing value
[  135.152986] loop7: detected capacity change from 0 to 194886
[  135.187793] loop7: detected capacity change from 0 to 194886
[  135.556100] loop6: detected capacity change from 0 to 264192
[  135.574105] loop6: detected capacity change from 0 to 264192
23:48:34 executing program 5:
prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffe000/0x2000)=nil)
mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000000)=0x80000000, 0x20, 0x4)
mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x6000, 0x2, &(0x7f0000ffa000/0x6000)=nil)
madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xd)
mbind(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, &(0x7f0000000040)=0x7f, 0x6, 0x2)
shmat(0xffffffffffffffff, &(0x7f0000850000/0x4000)=nil, 0x1000)
move_pages(0xffffffffffffffff, 0x8, &(0x7f0000000080)=[&(0x7f0000d82000/0x1000)=nil, &(0x7f0000a04000/0x2000)=nil, &(0x7f0000fe9000/0x14000)=nil, &(0x7f0000c61000/0xe000)=nil, &(0x7f0000cf8000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f00003fd000/0xc00000)=nil, &(0x7f0000970000/0x2000)=nil], &(0x7f00000000c0)=[0x1, 0x4, 0x4, 0x200, 0x80000001], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x2)
r0 = syz_open_dev$vcsa(&(0x7f0000000140), 0x17, 0x400)
mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0)
mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil)
mbind(&(0x7f0000ea9000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000180), 0x2, 0x1)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0, &(0x7f00000001c0)=0x80, &(0x7f0000000200)=@hci, 0x0, 0x800, 0x1}, 0x9)
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil)
shmat(r1, &(0x7f0000fcc000/0x3000)=nil, 0x5000)
mprotect(&(0x7f00006cb000/0x2000)=nil, 0x2000, 0x4)
mbind(&(0x7f0000b0e000/0x1000)=nil, 0x1000, 0x8000, &(0x7f00000002c0)=0x445, 0x6, 0x4)
get_mempolicy(&(0x7f0000000300), &(0x7f0000000340), 0xfffffffeffffffff, &(0x7f00005f7000/0x10000)=nil, 0x1)
mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
mremap(&(0x7f0000e7c000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffb000/0x3000)=nil)

23:48:34 executing program 0:
prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffe000/0x2000)=nil)
mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000000)=0x80000000, 0x20, 0x4)
mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x6000, 0x2, &(0x7f0000ffa000/0x6000)=nil)
madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xd)
mbind(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, &(0x7f0000000040)=0x7f, 0x6, 0x2)
shmat(0xffffffffffffffff, &(0x7f0000850000/0x4000)=nil, 0x1000)
move_pages(0xffffffffffffffff, 0x8, &(0x7f0000000080)=[&(0x7f0000d82000/0x1000)=nil, &(0x7f0000a04000/0x2000)=nil, &(0x7f0000fe9000/0x14000)=nil, &(0x7f0000c61000/0xe000)=nil, &(0x7f0000cf8000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f00003fd000/0xc00000)=nil, &(0x7f0000970000/0x2000)=nil], &(0x7f00000000c0)=[0x1, 0x4, 0x4, 0x200, 0x80000001], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x2)
r0 = syz_open_dev$vcsa(&(0x7f0000000140), 0x17, 0x400)
mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0)
mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil)
mbind(&(0x7f0000ea9000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000180), 0x2, 0x1)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0, &(0x7f00000001c0)=0x80, &(0x7f0000000200)=@hci, 0x0, 0x800, 0x1}, 0x9)
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil)
shmat(r1, &(0x7f0000fcc000/0x3000)=nil, 0x5000)
mprotect(&(0x7f00006cb000/0x2000)=nil, 0x2000, 0x4)
mbind(&(0x7f0000b0e000/0x1000)=nil, 0x1000, 0x8000, &(0x7f00000002c0)=0x445, 0x6, 0x4)
get_mempolicy(&(0x7f0000000300), &(0x7f0000000340), 0xfffffffeffffffff, &(0x7f00005f7000/0x10000)=nil, 0x1)
mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
mremap(&(0x7f0000e7c000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffb000/0x3000)=nil)

23:48:34 executing program 6:
mlock2(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c0e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x3)
ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000040)=0x2)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x90c83, 0x0)
finit_module(r1, &(0x7f0000000100)='/,*\x00', 0x3)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='smaps_rollup\x00')
perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x0, 0x80, 0x1, 0x3f, 0x0, 0x2, 0x86002, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x8}, 0x88, 0x1, 0x4, 0x8, 0x1, 0x3f, 0x7fff, 0x0, 0x8, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3)
dup3(r2, 0xffffffffffffffff, 0x80000)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0xfa, 0x0, 0x0, 0xff, 0x0, 0x1000022, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x5}, 0x10, 0x0, 0x8, 0x0, 0x4, 0x0, 0x40}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x2)
openat2(r2, &(0x7f0000000240)='./file1\x00', &(0x7f0000000300)={0xa4e02, 0x21, 0x1b}, 0x18)
r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4)
r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0)
ioctl$SNAPSHOT_FREE(r5, 0x3305)
mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x1000, 0x7, &(0x7f0000fff000/0x1000)=nil)
mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil)

23:48:34 executing program 1:
syz_genetlink_get_family_id$gtp(&(0x7f0000000000), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0)
recvmmsg(r0, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000005500), r0)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="48001200", @ANYRES16=0x0, @ANYBLOB="000329bd7000ffdbdf257f00000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990006000000300000000a0034000202020202020000140055009da71febaa1372e2821a1dfe98d83475"], 0x48}, 0x1, 0x0, 0x0, 0x5}, 0x41)
r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
write$tcp_congestion(r1, &(0x7f0000000080)='bbr\x00', 0x4)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0)
recvmmsg(r2, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000005500), r2)
syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r2)
connect$netlink(r0, &(0x7f0000000240)=@proc={0x10, 0x0, 0x25dfdbfe, 0x4000}, 0xc)

23:48:34 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000380)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x30, 0x0, "1011a0f43c11e86a574d766a1efd9908dc1c90f8fe673d0908cfc77225c692dd6bf732e61aee79338afe49c997640ced87bf14b3f8e2a6d3e16f781eca700764f98d8da9770fc49e9847cee080999f6d"}, 0xd8)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, "146976cb538f0ac2bdc7cce9987b499b7640615a46b47ec5bac700000000000000df8ee9168816767bf98aec6d90baf94ac765d2e245ec4c20c107f4a43d09c35ba25e531d6007de5efe70856cffb5cd"}, 0xd8)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000040)={@in={{0x2, 0x0, @local}}, 0x0, 0x0, 0x3f, 0x0, "2d2b29f148803297e2c23876885750648cb9e9318a9bac16185b908b372553ea2f942b4c613ef644a127f5733159a2b61334185eb18259802142bd9e4e9d01702eec026ed4fef1400f4902a759ff2191"}, 0xd8)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x4e22, 0x8, @empty, 0x4}}, 0x0, 0x0, 0x4f, 0x0, "dc27c779e233e04e0611d0d1b6f9b6003495090e10c64ae4ccd7f0cab78379e223ff63386f28af93cb00be6d4d8b24dd2e9710406168faa2fa05c0ebff580eecd4364c2e300becc8484b187f2de2a86e"}, 0xd8)

23:48:34 executing program 4:
r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0)
write$selinux_attr(r0, 0x0, 0x0)

23:48:34 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000007c0), 0x2}, 0xcc80, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0)
r1 = syz_io_uring_setup(0x4cdd, &(0x7f0000000140)={0x0, 0x6c4c, 0x10, 0x2, 0x213}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000300))
syz_io_uring_setup(0x2c86, &(0x7f0000000600)={0x0, 0x0, 0x2, 0x2, 0x213}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000680), &(0x7f0000000800))
r2 = syz_io_uring_setup(0x3740, &(0x7f0000000700)={0x0, 0x573c, 0x4, 0x3, 0x309, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000340))
getpid()
syz_io_uring_setup(0xf95, &(0x7f00000004c0)={0x0, 0x23d1, 0x20, 0x3, 0x316, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580))
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x2)
r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r3, 0x0)
ftruncate(r1, 0xfffffffffffffff7)
openat(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x100000, 0x95)
close(r3)
syz_io_uring_setup(0xaaf, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000380))
finit_module(r0, 0x0, 0x0)
syz_io_uring_setup(0x5e00, &(0x7f0000000840)={0x0, 0x595c, 0x10, 0x1, 0xff}, &(0x7f0000ffa000/0x6000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000008c0), &(0x7f0000000900))
syz_io_uring_setup(0x5787, &(0x7f0000000400)={0x0, 0x700f, 0x0, 0x3, 0x28a, 0x0, r2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000005c0))

23:48:34 executing program 2:
setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, &(0x7f0000000000)={0xfd, {{0x2, 0x4e22, @local}}}, 0x88)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, &(0x7f00000000c0)={0x7, 'nr0\x00', {0xed}, 0x3})
r1 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000100))
recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000140)=@alg, 0x80, &(0x7f0000000400)=[{&(0x7f00000001c0)=""/35, 0x23}, {&(0x7f0000000200)=""/168, 0xa8}, {&(0x7f00000002c0)=""/106, 0x6a}, {&(0x7f0000000340)=""/139, 0x8b}], 0x4, &(0x7f0000000440)=""/147, 0x93}, 0x400021c2)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8983, &(0x7f0000000540)={0x7, 'veth0_to_hsr\x00', {0x1}, 0x4})
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000580)={{0x1, 0x1, 0x18, <r3=>r2, {0x7fffffff}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f00000005c0)={{0x1, 0x1, 0x18, <r4=>r0, {0x7fff}}, './file0\x00'})
getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000600)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000700)=0xe8)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000740)={{0x1, 0x1, 0x18, r4, {r5, 0xffffffffffffffff}}, './file0\x00'})
getsockopt$sock_buf(r1, 0x1, 0x3d, &(0x7f0000000780)=""/135, &(0x7f0000000840)=0x87)
socket$packet(0x11, 0x3, 0x300)
preadv2(r3, &(0x7f0000000940)=[{&(0x7f0000000880)=""/181, 0xb5}], 0x1, 0xffffffff, 0x384, 0x4)
r6 = accept$inet(r3, &(0x7f0000000980)={0x2, 0x0, @local}, &(0x7f00000009c0)=0x10)
getsockopt$IP_SET_OP_GET_FNAME(r6, 0x1, 0x53, &(0x7f0000000a00)={0x8, 0x7, 0x0, 'syz1\x00'}, &(0x7f0000000a40)=0x2c)
r7 = fsmount(r4, 0x1, 0x89)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r7, 0x89fa, &(0x7f0000000b00)={'ip6_vti0\x00', &(0x7f0000000a80)={'ip6tnl0\x00', 0x0, 0x4, 0x9, 0x91, 0x8, 0x18, @ipv4={'\x00', '\xff\xff', @empty}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000, 0x20, 0x7fffffff}})
ioctl$INCFS_IOC_CREATE_FILE(r7, 0xc058671e, &(0x7f0000000f40)={{'\x00', 0x4}, {0xffffffff}, 0x58, 0x0, 0x0, &(0x7f0000000b40)='./file0\x00', &(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)="932def41dc14f019d4b7c595721f2768416bd3e283140a94953aeabf3190ff601397d12bc4cdb109d2e6cb2c527e1e10a46b79716d4327f883bc0ca9097ac58c6ead7b6f23855ad9765e7c650715861d102215bc136658d75a8ae952838337ccc7ffc17a9ba3014bfa1f55d2ca242f83d66091217ef14565782a198f13b15746e3e28fb45b6e49e6393d5e0a7dde22c3dab7065608d29cdb9ff2dd0856b70602b861e8f494c6bf6876c23dac06a702fe9582d252c709b58dc2e499428c7306adc48a78ce2c571af82b77a352a3f774c2af2869ab75ae9e6f9f72d83f984fff3abed4c1138ec574038c7f1ddd66470caaccbbc53acc76967a35cc02bd84b705883ddd14cf6379bf30ba9d63b0c019cbf47b9034d80020e3e909c7a222bf98fc7573e4d64eba81a362ce30dc5a93673df9e5aaac387c59aa9ef8e47f92b1c814af8a49641ef6fdf497ce702d73bfc1390cd4b12c49bd9c739582ee88d00f", 0x15d, 0x0, &(0x7f0000000d40)={0x2, 0x149, {0x0, 0xc, 0x4c, "10c2257806ef69eb2c2ac5e4edafa76054645ddf8d9d61bdf47266272b20c9d77f360f0c9fc2fba12fb0315bdf0e536e3f6043a4c946aacfed998313796b3a781b8ed2ad375fd7b1f67004c3", 0xf0, "03ac9e0decbfdc08a5d0ef544e09eab65b9a3ebc3e7962c6d37f2ab7e85e9728fe6e6c4b4800f92b85006cef5b6a0397bd66caa0b6f2815cab7d8852b055aef56b1519ced532375cd8226ee04278c5dfffda8ef5bb3b4fdcddc9245581b25377f2a1e6c6f3506cf0903335302473123eee311b66a7c6da124b6352882a6e6ab69e12b1f33704b3883d28be1c4a8e147eebe5bd98fb8b1061adb619bd48c633385841785442aa62308c5dc01e45cc3ac3f3095eadb5474d4783fbef379219db369428601a57bbb2f0ae9a7c2c8ad97bbfda6b2d056d2fc558cab33c13830a92a491371aa62f92c8ab6c051cf43d9f085a"}, 0x76, "f4993aba0345abb2e573b793368f274ddf73662d3721b25a342d3dccc20a6b9e4f9f59e6de32da70f41ed725697bd8da8b8322b6a47c56e63181fdcb4027dc5addb631813d573602df8fb2362209edc639677b56e45e6402348f5469b796ea00dcd9364bf57508dfc970ded8fa9731c7e444837d1fe9"}, 0x1cb})
bind(r2, &(0x7f0000000fc0)=@generic={0xa, "2aaaf2d39c7be963e0b9d54738b252e3b351c2e8432bc92cd726f7c484d166a470cbc71649dab8b75b54123057131f316d1e4585a44707bbba3785fd48c5e14d768b13c05c6f9bf3294297be0fef694394ecac05fdb2854ea9037d26eb8e4b4202b925708327f857c4d7a4651445ea7b7c51c20d54f7c287340f3efd03f5"}, 0x80)

[  152.155084] audit: type=1400 audit(1664063314.826:15): avc:  denied  { kernel } for  pid=3982 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[  152.182158] ------------[ cut here ]------------
[  152.182196] 
[  152.182201] ======================================================
[  152.182207] WARNING: possible circular locking dependency detected
[  152.182214] 6.0.0-rc6-next-20220923 #1 Not tainted
[  152.182227] ------------------------------------------------------
[  152.182233] syz-executor.7/3986 is trying to acquire lock:
[  152.182245] ffffffff853faaf8 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70
[  152.182315] 
[  152.182315] but task is already holding lock:
[  152.182320] ffff88800e3e4820 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0
[  152.182374] 
[  152.182374] which lock already depends on the new lock.
[  152.182374] 
[  152.182379] 
[  152.182379] the existing dependency chain (in reverse order) is:
[  152.182385] 
[  152.182385] -> #3 (&ctx->lock){....}-{2:2}:
23:48:34 executing program 0:
prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffe000/0x2000)=nil)
mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000000)=0x80000000, 0x20, 0x4)
mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x6000, 0x2, &(0x7f0000ffa000/0x6000)=nil)
madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xd)
mbind(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, &(0x7f0000000040)=0x7f, 0x6, 0x2)
shmat(0xffffffffffffffff, &(0x7f0000850000/0x4000)=nil, 0x1000)
move_pages(0xffffffffffffffff, 0x8, &(0x7f0000000080)=[&(0x7f0000d82000/0x1000)=nil, &(0x7f0000a04000/0x2000)=nil, &(0x7f0000fe9000/0x14000)=nil, &(0x7f0000c61000/0xe000)=nil, &(0x7f0000cf8000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f00003fd000/0xc00000)=nil, &(0x7f0000970000/0x2000)=nil], &(0x7f00000000c0)=[0x1, 0x4, 0x4, 0x200, 0x80000001], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x2)
r0 = syz_open_dev$vcsa(&(0x7f0000000140), 0x17, 0x400)
mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0)
mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil)
mbind(&(0x7f0000ea9000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000180), 0x2, 0x1)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0, &(0x7f00000001c0)=0x80, &(0x7f0000000200)=@hci, 0x0, 0x800, 0x1}, 0x9)
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil)
shmat(r1, &(0x7f0000fcc000/0x3000)=nil, 0x5000)
mprotect(&(0x7f00006cb000/0x2000)=nil, 0x2000, 0x4)
mbind(&(0x7f0000b0e000/0x1000)=nil, 0x1000, 0x8000, &(0x7f00000002c0)=0x445, 0x6, 0x4)
get_mempolicy(&(0x7f0000000300), &(0x7f0000000340), 0xfffffffeffffffff, &(0x7f00005f7000/0x10000)=nil, 0x1)
mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
mremap(&(0x7f0000e7c000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffb000/0x3000)=nil)

[  152.182412]        _raw_spin_lock+0x2a/0x40
[  152.182448]        __perf_event_task_sched_out+0x53b/0x18d0
[  152.182473]        __schedule+0xedd/0x2470
[  152.182499]        schedule+0xda/0x1b0
[  152.182525]        exit_to_user_mode_prepare+0x114/0x1a0
[  152.182547]        syscall_exit_to_user_mode+0x19/0x40
[  152.182571]        do_syscall_64+0x48/0x90
[  152.182603]        entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  152.182627] 
[  152.182627] -> #2 (&rq->__lock){-.-.}-{2:2}:
[  152.182654]        _raw_spin_lock_nested+0x30/0x40
[  152.182689]        raw_spin_rq_lock_nested+0x1e/0x30
[  152.182714]        task_fork_fair+0x63/0x4d0
[  152.182746]        sched_cgroup_fork+0x3d0/0x540
[  152.182773]        copy_process+0x4183/0x6e20
[  152.182792]        kernel_clone+0xe7/0x890
[  152.182811]        user_mode_thread+0xad/0xf0
[  152.182831]        rest_init+0x24/0x250
[  152.182852]        arch_call_rest_init+0xf/0x14
[  152.182885]        start_kernel+0x4c1/0x4e6
[  152.182915]        secondary_startup_64_no_verify+0xe0/0xeb
[  152.182941] 
[  152.182941] -> #1 (&p->pi_lock){-.-.}-{2:2}:
[  152.182968]        _raw_spin_lock_irqsave+0x39/0x60
[  152.183004]        try_to_wake_up+0xab/0x1930
[  152.183029]        up+0x75/0xb0
[  152.183056]        __up_console_sem+0x6e/0x80
[  152.183086]        console_unlock+0x46a/0x590
[  152.183117]        con_flush_chars+0x76/0x90
[  152.183137]        n_tty_write+0xc40/0xfe0
[  152.183162]        file_tty_write.constprop.0+0x49c/0x8f0
[  152.183186]        vfs_write+0x9c3/0xd90
[  152.183220]        ksys_write+0x127/0x250
[  152.183254]        do_syscall_64+0x3b/0x90
[  152.183285]        entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  152.183309] 
[  152.183309] -> #0 ((console_sem).lock){....}-{2:2}:
[  152.183345]        __lock_acquire+0x2a02/0x5e70
[  152.183378]        lock_acquire+0x1a2/0x530
[  152.183408]        _raw_spin_lock_irqsave+0x39/0x60
[  152.183444]        down_trylock+0xe/0x70
[  152.183473]        __down_trylock_console_sem+0x3b/0xd0
[  152.183504]        vprintk_emit+0x16b/0x560
[  152.183535]        vprintk+0x84/0xa0
[  152.183566]        _printk+0xba/0xf1
[  152.183587]        report_bug.cold+0x72/0xab
[  152.183618]        handle_bug+0x3c/0x70
[  152.183649]        exc_invalid_op+0x14/0x50
[  152.183681]        asm_exc_invalid_op+0x16/0x20
[  152.183704]        group_sched_out.part.0+0x2c7/0x460
[  152.183725]        ctx_sched_out+0x8f1/0xc10
[  152.183744]        __perf_event_task_sched_out+0x6d0/0x18d0
[  152.183769]        __schedule+0xedd/0x2470
[  152.183795]        schedule+0xda/0x1b0
[  152.183820]        exit_to_user_mode_prepare+0x114/0x1a0
[  152.183841]        syscall_exit_to_user_mode+0x19/0x40
[  152.183865]        do_syscall_64+0x48/0x90
[  152.183896]        entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  152.183920] 
[  152.183920] other info that might help us debug this:
[  152.183920] 
[  152.183925] Chain exists of:
[  152.183925]   (console_sem).lock --> &rq->__lock --> &ctx->lock
[  152.183925] 
[  152.183954]  Possible unsafe locking scenario:
[  152.183954] 
[  152.183959]        CPU0                    CPU1
[  152.183963]        ----                    ----
[  152.183967]   lock(&ctx->lock);
[  152.183978]                                lock(&rq->__lock);
[  152.183990]                                lock(&ctx->lock);
[  152.184003]   lock((console_sem).lock);
[  152.184014] 
[  152.184014]  *** DEADLOCK ***
[  152.184014] 
[  152.184017] 2 locks held by syz-executor.7/3986:
[  152.184031]  #0: ffff88806ce37d18 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470
[  152.184088]  #1: ffff88800e3e4820 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0
[  152.184142] 
[  152.184142] stack backtrace:
[  152.184147] CPU: 0 PID: 3986 Comm: syz-executor.7 Not tainted 6.0.0-rc6-next-20220923 #1
[  152.184171] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[  152.184187] Call Trace:
[  152.184193]  <TASK>
[  152.184200]  dump_stack_lvl+0x8b/0xb3
[  152.184235]  check_noncircular+0x263/0x2e0
[  152.184267]  ? format_decode+0x26c/0xb50
[  152.184298]  ? print_circular_bug+0x450/0x450
[  152.184332]  ? enable_ptr_key_workfn+0x20/0x20
[  152.184363]  ? perf_swevent_event+0x6c/0x550
[  152.184400]  ? format_decode+0x26c/0xb50
[  152.184433]  ? alloc_chain_hlocks+0x1ec/0x5a0
[  152.184468]  __lock_acquire+0x2a02/0x5e70
[  152.184510]  ? lockdep_hardirqs_on_prepare+0x410/0x410
[  152.184554]  lock_acquire+0x1a2/0x530
[  152.184587]  ? down_trylock+0xe/0x70
[  152.184620]  ? lock_release+0x750/0x750
[  152.184660]  ? vprintk+0x84/0xa0
[  152.184694]  _raw_spin_lock_irqsave+0x39/0x60
[  152.184732]  ? down_trylock+0xe/0x70
[  152.184763]  down_trylock+0xe/0x70
[  152.184793]  ? vprintk+0x84/0xa0
[  152.184826]  __down_trylock_console_sem+0x3b/0xd0
[  152.184860]  vprintk_emit+0x16b/0x560
[  152.184897]  vprintk+0x84/0xa0
[  152.184931]  _printk+0xba/0xf1
[  152.184953]  ? record_print_text.cold+0x16/0x16
[  152.184984]  ? report_bug.cold+0x66/0xab
[  152.185019]  ? group_sched_out.part.0+0x2c7/0x460
[  152.185042]  report_bug.cold+0x72/0xab
[  152.185078]  handle_bug+0x3c/0x70
[  152.185112]  exc_invalid_op+0x14/0x50
[  152.185147]  asm_exc_invalid_op+0x16/0x20
[  152.185171] RIP: 0010:group_sched_out.part.0+0x2c7/0x460
[  152.185197] Code: 5e 41 5f e9 5b bb ef ff e8 56 bb ef ff 65 8b 1d 1b 26 ac 7e 31 ff 89 de e8 f6 b7 ef ff 85 db 0f 84 8a 00 00 00 e8 39 bb ef ff <0f> 0b e9 a5 fe ff ff e8 2d bb ef ff 48 8d 7d 10 48 b8 00 00 00 00
[  152.185220] RSP: 0018:ffff888041b97c48 EFLAGS: 00010006
[  152.185237] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000
[  152.185252] RDX: ffff88803fd50000 RSI: ffffffff81564fb7 RDI: 0000000000000005
[  152.185267] RBP: ffff888008668000 R08: 0000000000000005 R09: 0000000000000001
[  152.185282] R10: 0000000000000000 R11: ffffffff865b001b R12: ffff88800e3e4800
[  152.185297] R13: ffff88806ce3d140 R14: ffffffff8547d040 R15: 0000000000000002
[  152.185318]  ? group_sched_out.part.0+0x2c7/0x460
[  152.185345]  ? group_sched_out.part.0+0x2c7/0x460
[  152.185371]  ctx_sched_out+0x8f1/0xc10
[  152.185396]  __perf_event_task_sched_out+0x6d0/0x18d0
[  152.185427]  ? lock_is_held_type+0xd7/0x130
[  152.185454]  ? __perf_cgroup_move+0x160/0x160
[  152.185478]  ? set_next_entity+0x304/0x550
[  152.185512]  ? update_curr+0x267/0x740
[  152.185548]  ? lock_is_held_type+0xd7/0x130
[  152.185575]  __schedule+0xedd/0x2470
[  152.185608]  ? io_schedule_timeout+0x150/0x150
[  152.185639]  ? trace_rcu_dyntick+0x1a7/0x250
[  152.185680]  schedule+0xda/0x1b0
[  152.185708]  exit_to_user_mode_prepare+0x114/0x1a0
[  152.185732]  syscall_exit_to_user_mode+0x19/0x40
[  152.185758]  do_syscall_64+0x48/0x90
[  152.185792]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  152.185818] RIP: 0033:0x7f5bc4096b19
[  152.185834] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  152.185856] RSP: 002b:00007f5bc160c218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  152.185877] RAX: 0000000000000001 RBX: 00007f5bc41a9f68 RCX: 00007f5bc4096b19
[  152.185892] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f5bc41a9f6c
[  152.185906] RBP: 00007f5bc41a9f60 R08: 000000000000000e R09: 0000000000000000
[  152.185920] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f5bc41a9f6c
[  152.185935] R13: 00007fffc5bff60f R14: 00007f5bc160c300 R15: 0000000000022000
[  152.185960]  </TASK>
[  152.295170] WARNING: CPU: 0 PID: 3986 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460
[  152.296455] Modules linked in:
[  152.296899] CPU: 0 PID: 3986 Comm: syz-executor.7 Not tainted 6.0.0-rc6-next-20220923 #1
[  152.298001] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[  152.299567] RIP: 0010:group_sched_out.part.0+0x2c7/0x460
[  152.300308] Code: 5e 41 5f e9 5b bb ef ff e8 56 bb ef ff 65 8b 1d 1b 26 ac 7e 31 ff 89 de e8 f6 b7 ef ff 85 db 0f 84 8a 00 00 00 e8 39 bb ef ff <0f> 0b e9 a5 fe ff ff e8 2d bb ef ff 48 8d 7d 10 48 b8 00 00 00 00
[  152.302763] RSP: 0018:ffff888041b97c48 EFLAGS: 00010006
[  152.303502] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000
[  152.304471] RDX: ffff88803fd50000 RSI: ffffffff81564fb7 RDI: 0000000000000005
[  152.305433] RBP: ffff888008668000 R08: 0000000000000005 R09: 0000000000000001
[  152.306410] R10: 0000000000000000 R11: ffffffff865b001b R12: ffff88800e3e4800
[  152.307381] R13: ffff88806ce3d140 R14: ffffffff8547d040 R15: 0000000000000002
[  152.308361] FS:  00007f5bc160c700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000
[  152.309451] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  152.310242] CR2: 00007ffe102f2438 CR3: 000000001e108000 CR4: 0000000000350ef0
[  152.311216] Call Trace:
[  152.311594]  <TASK>
[  152.311919]  ctx_sched_out+0x8f1/0xc10
[  152.312466]  __perf_event_task_sched_out+0x6d0/0x18d0
[  152.313183]  ? lock_is_held_type+0xd7/0x130
[  152.313781]  ? __perf_cgroup_move+0x160/0x160
[  152.314403]  ? set_next_entity+0x304/0x550
[  152.315004]  ? update_curr+0x267/0x740
[  152.315586]  ? lock_is_held_type+0xd7/0x130
[  152.316190]  __schedule+0xedd/0x2470
[  152.316720]  ? io_schedule_timeout+0x150/0x150
[  152.317368]  ? trace_rcu_dyntick+0x1a7/0x250
[  152.318003]  schedule+0xda/0x1b0
[  152.318486]  exit_to_user_mode_prepare+0x114/0x1a0
[  152.319165]  syscall_exit_to_user_mode+0x19/0x40
[  152.319828]  do_syscall_64+0x48/0x90
[  152.320347]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  152.321036] RIP: 0033:0x7f5bc4096b19
[  152.321531] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  152.323995] RSP: 002b:00007f5bc160c218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  152.325024] RAX: 0000000000000001 RBX: 00007f5bc41a9f68 RCX: 00007f5bc4096b19
[  152.326005] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f5bc41a9f6c
[  152.326966] RBP: 00007f5bc41a9f60 R08: 000000000000000e R09: 0000000000000000
[  152.327948] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f5bc41a9f6c
[  152.328910] R13: 00007fffc5bff60f R14: 00007f5bc160c300 R15: 0000000000022000
[  152.329890]  </TASK>
[  152.330221] irq event stamp: 474
[  152.330681] hardirqs last  enabled at (473): [<ffffffff8133e999>] exit_to_user_mode_prepare+0x109/0x1a0
[  152.331965] hardirqs last disabled at (474): [<ffffffff84259645>] __schedule+0x1225/0x2470
[  152.333082] softirqs last  enabled at (232): [<ffffffff8116fa8b>] __irq_exit_rcu+0x11b/0x180
[  152.334185] softirqs last disabled at (223): [<ffffffff8116fa8b>] __irq_exit_rcu+0x11b/0x180
[  152.335377] ---[ end trace 0000000000000000 ]---
23:48:35 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000380)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x30, 0x0, "1011a0f43c11e86a574d766a1efd9908dc1c90f8fe673d0908cfc77225c692dd6bf732e61aee79338afe49c997640ced87bf14b3f8e2a6d3e16f781eca700764f98d8da9770fc49e9847cee080999f6d"}, 0xd8)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, "146976cb538f0ac2bdc7cce9987b499b7640615a46b47ec5bac700000000000000df8ee9168816767bf98aec6d90baf94ac765d2e245ec4c20c107f4a43d09c35ba25e531d6007de5efe70856cffb5cd"}, 0xd8)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000040)={@in={{0x2, 0x0, @local}}, 0x0, 0x0, 0x3f, 0x0, "2d2b29f148803297e2c23876885750648cb9e9318a9bac16185b908b372553ea2f942b4c613ef644a127f5733159a2b61334185eb18259802142bd9e4e9d01702eec026ed4fef1400f4902a759ff2191"}, 0xd8)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x4e22, 0x8, @empty, 0x4}}, 0x0, 0x0, 0x4f, 0x0, "dc27c779e233e04e0611d0d1b6f9b6003495090e10c64ae4ccd7f0cab78379e223ff63386f28af93cb00be6d4d8b24dd2e9710406168faa2fa05c0ebff580eecd4364c2e300becc8484b187f2de2a86e"}, 0xd8)

[  152.360883] random: crng reseeded on system resumption
[  152.362208] Restarting kernel threads ... done.
23:48:35 executing program 2:
setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, &(0x7f0000000000)={0xfd, {{0x2, 0x4e22, @local}}}, 0x88)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, &(0x7f00000000c0)={0x7, 'nr0\x00', {0xed}, 0x3})
r1 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000100))
recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000140)=@alg, 0x80, &(0x7f0000000400)=[{&(0x7f00000001c0)=""/35, 0x23}, {&(0x7f0000000200)=""/168, 0xa8}, {&(0x7f00000002c0)=""/106, 0x6a}, {&(0x7f0000000340)=""/139, 0x8b}], 0x4, &(0x7f0000000440)=""/147, 0x93}, 0x400021c2)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8983, &(0x7f0000000540)={0x7, 'veth0_to_hsr\x00', {0x1}, 0x4})
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000580)={{0x1, 0x1, 0x18, <r3=>r2, {0x7fffffff}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f00000005c0)={{0x1, 0x1, 0x18, <r4=>r0, {0x7fff}}, './file0\x00'})
getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000600)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000700)=0xe8)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000740)={{0x1, 0x1, 0x18, r4, {r5, 0xffffffffffffffff}}, './file0\x00'})
getsockopt$sock_buf(r1, 0x1, 0x3d, &(0x7f0000000780)=""/135, &(0x7f0000000840)=0x87)
socket$packet(0x11, 0x3, 0x300)
preadv2(r3, &(0x7f0000000940)=[{&(0x7f0000000880)=""/181, 0xb5}], 0x1, 0xffffffff, 0x384, 0x4)
r6 = accept$inet(r3, &(0x7f0000000980)={0x2, 0x0, @local}, &(0x7f00000009c0)=0x10)
getsockopt$IP_SET_OP_GET_FNAME(r6, 0x1, 0x53, &(0x7f0000000a00)={0x8, 0x7, 0x0, 'syz1\x00'}, &(0x7f0000000a40)=0x2c)
r7 = fsmount(r4, 0x1, 0x89)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r7, 0x89fa, &(0x7f0000000b00)={'ip6_vti0\x00', &(0x7f0000000a80)={'ip6tnl0\x00', 0x0, 0x4, 0x9, 0x91, 0x8, 0x18, @ipv4={'\x00', '\xff\xff', @empty}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000, 0x20, 0x7fffffff}})
ioctl$INCFS_IOC_CREATE_FILE(r7, 0xc058671e, &(0x7f0000000f40)={{'\x00', 0x4}, {0xffffffff}, 0x58, 0x0, 0x0, &(0x7f0000000b40)='./file0\x00', &(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)="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", 0x15d, 0x0, &(0x7f0000000d40)={0x2, 0x149, {0x0, 0xc, 0x4c, "10c2257806ef69eb2c2ac5e4edafa76054645ddf8d9d61bdf47266272b20c9d77f360f0c9fc2fba12fb0315bdf0e536e3f6043a4c946aacfed998313796b3a781b8ed2ad375fd7b1f67004c3", 0xf0, "03ac9e0decbfdc08a5d0ef544e09eab65b9a3ebc3e7962c6d37f2ab7e85e9728fe6e6c4b4800f92b85006cef5b6a0397bd66caa0b6f2815cab7d8852b055aef56b1519ced532375cd8226ee04278c5dfffda8ef5bb3b4fdcddc9245581b25377f2a1e6c6f3506cf0903335302473123eee311b66a7c6da124b6352882a6e6ab69e12b1f33704b3883d28be1c4a8e147eebe5bd98fb8b1061adb619bd48c633385841785442aa62308c5dc01e45cc3ac3f3095eadb5474d4783fbef379219db369428601a57bbb2f0ae9a7c2c8ad97bbfda6b2d056d2fc558cab33c13830a92a491371aa62f92c8ab6c051cf43d9f085a"}, 0x76, "f4993aba0345abb2e573b793368f274ddf73662d3721b25a342d3dccc20a6b9e4f9f59e6de32da70f41ed725697bd8da8b8322b6a47c56e63181fdcb4027dc5addb631813d573602df8fb2362209edc639677b56e45e6402348f5469b796ea00dcd9364bf57508dfc970ded8fa9731c7e444837d1fe9"}, 0x1cb})
bind(r2, &(0x7f0000000fc0)=@generic={0xa, "2aaaf2d39c7be963e0b9d54738b252e3b351c2e8432bc92cd726f7c484d166a470cbc71649dab8b75b54123057131f316d1e4585a44707bbba3785fd48c5e14d768b13c05c6f9bf3294297be0fef694394ecac05fdb2854ea9037d26eb8e4b4202b925708327f857c4d7a4651445ea7b7c51c20d54f7c287340f3efd03f5"}, 0x80)

23:48:35 executing program 4:
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x684, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1a}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000200))
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
mmap$perf(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x50, r0, 0x3)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r2)
r3 = socket$inet6(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
sendmsg$unix(r4, &(0x7f00000008c0)={&(0x7f0000000740)=@abs, 0x6e, 0x0}, 0x20008084)
ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82)
process_vm_readv(0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000000100)=""/57, 0x39}], 0x2, &(0x7f0000000300)=[{&(0x7f0000012940)=""/102400, 0x19000}, {0x0}], 0x2, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100cf0018800000", @ANYRES32=<r6=>0xffffffffffffffff, @ANYBLOB="6eec00ffff0000ffffffff686c653100"])
write$P9_RLCREATE(r6, &(0x7f0000000180)={0x18, 0xf, 0x1, {{0x10, 0x3, 0x7}, 0x9f}}, 0x18)
r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/block/loop6', 0x80400, 0x10)
pwritev(r5, &(0x7f0000000240)=[{&(0x7f0000000140)="cf", 0x1}], 0x1, 0x0, 0x0)
r8 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0)
ioctl$SG_IO(r8, 0x5392, &(0x7f0000000240)={0x53, 0xfffffffffffffffb, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r7, 0xc08c5334, &(0x7f0000000340)={0x7ff, 0x1, 0x1, 'queue1\x00', 0x7})

[  152.393018] random: crng reseeded on system resumption
[  152.394753] Restarting kernel threads ... done.
23:48:35 executing program 5:
prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffe000/0x2000)=nil)
mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000000)=0x80000000, 0x20, 0x4)
mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x6000, 0x2, &(0x7f0000ffa000/0x6000)=nil)
madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xd)
mbind(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, &(0x7f0000000040)=0x7f, 0x6, 0x2)
shmat(0xffffffffffffffff, &(0x7f0000850000/0x4000)=nil, 0x1000)
move_pages(0xffffffffffffffff, 0x8, &(0x7f0000000080)=[&(0x7f0000d82000/0x1000)=nil, &(0x7f0000a04000/0x2000)=nil, &(0x7f0000fe9000/0x14000)=nil, &(0x7f0000c61000/0xe000)=nil, &(0x7f0000cf8000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f00003fd000/0xc00000)=nil, &(0x7f0000970000/0x2000)=nil], &(0x7f00000000c0)=[0x1, 0x4, 0x4, 0x200, 0x80000001], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x2)
r0 = syz_open_dev$vcsa(&(0x7f0000000140), 0x17, 0x400)
mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0)
mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil)
mbind(&(0x7f0000ea9000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000180), 0x2, 0x1)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0, &(0x7f00000001c0)=0x80, &(0x7f0000000200)=@hci, 0x0, 0x800, 0x1}, 0x9)
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil)
shmat(r1, &(0x7f0000fcc000/0x3000)=nil, 0x5000)
mprotect(&(0x7f00006cb000/0x2000)=nil, 0x2000, 0x4)
mbind(&(0x7f0000b0e000/0x1000)=nil, 0x1000, 0x8000, &(0x7f00000002c0)=0x445, 0x6, 0x4)
get_mempolicy(&(0x7f0000000300), &(0x7f0000000340), 0xfffffffeffffffff, &(0x7f00005f7000/0x10000)=nil, 0x1)
mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
mremap(&(0x7f0000e7c000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffb000/0x3000)=nil)

23:48:35 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000380)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x30, 0x0, "1011a0f43c11e86a574d766a1efd9908dc1c90f8fe673d0908cfc77225c692dd6bf732e61aee79338afe49c997640ced87bf14b3f8e2a6d3e16f781eca700764f98d8da9770fc49e9847cee080999f6d"}, 0xd8)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, "146976cb538f0ac2bdc7cce9987b499b7640615a46b47ec5bac700000000000000df8ee9168816767bf98aec6d90baf94ac765d2e245ec4c20c107f4a43d09c35ba25e531d6007de5efe70856cffb5cd"}, 0xd8)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000040)={@in={{0x2, 0x0, @local}}, 0x0, 0x0, 0x3f, 0x0, "2d2b29f148803297e2c23876885750648cb9e9318a9bac16185b908b372553ea2f942b4c613ef644a127f5733159a2b61334185eb18259802142bd9e4e9d01702eec026ed4fef1400f4902a759ff2191"}, 0xd8)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x4e22, 0x8, @empty, 0x4}}, 0x0, 0x0, 0x4f, 0x0, "dc27c779e233e04e0611d0d1b6f9b6003495090e10c64ae4ccd7f0cab78379e223ff63386f28af93cb00be6d4d8b24dd2e9710406168faa2fa05c0ebff580eecd4364c2e300becc8484b187f2de2a86e"}, 0xd8)

23:48:35 executing program 6:
mlock2(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c0e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x3)
ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000040)=0x2)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x90c83, 0x0)
finit_module(r1, &(0x7f0000000100)='/,*\x00', 0x3)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='smaps_rollup\x00')
perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x0, 0x80, 0x1, 0x3f, 0x0, 0x2, 0x86002, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x8}, 0x88, 0x1, 0x4, 0x8, 0x1, 0x3f, 0x7fff, 0x0, 0x8, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3)
dup3(r2, 0xffffffffffffffff, 0x80000)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0xfa, 0x0, 0x0, 0xff, 0x0, 0x1000022, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x5}, 0x10, 0x0, 0x8, 0x0, 0x4, 0x0, 0x40}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x2)
openat2(r2, &(0x7f0000000240)='./file1\x00', &(0x7f0000000300)={0xa4e02, 0x21, 0x1b}, 0x18)
r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4)
r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0)
ioctl$SNAPSHOT_FREE(r5, 0x3305)
mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x1000, 0x7, &(0x7f0000fff000/0x1000)=nil)
mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil)

23:48:35 executing program 5:
prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffe000/0x2000)=nil)
mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000000)=0x80000000, 0x20, 0x4)
mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x6000, 0x2, &(0x7f0000ffa000/0x6000)=nil)
madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xd)
mbind(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, &(0x7f0000000040)=0x7f, 0x6, 0x2)
shmat(0xffffffffffffffff, &(0x7f0000850000/0x4000)=nil, 0x1000)
move_pages(0xffffffffffffffff, 0x8, &(0x7f0000000080)=[&(0x7f0000d82000/0x1000)=nil, &(0x7f0000a04000/0x2000)=nil, &(0x7f0000fe9000/0x14000)=nil, &(0x7f0000c61000/0xe000)=nil, &(0x7f0000cf8000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f00003fd000/0xc00000)=nil, &(0x7f0000970000/0x2000)=nil], &(0x7f00000000c0)=[0x1, 0x4, 0x4, 0x200, 0x80000001], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x2)
r0 = syz_open_dev$vcsa(&(0x7f0000000140), 0x17, 0x400)
mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0)
mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil)
mbind(&(0x7f0000ea9000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000180), 0x2, 0x1)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0, &(0x7f00000001c0)=0x80, &(0x7f0000000200)=@hci, 0x0, 0x800, 0x1}, 0x9)
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil)
shmat(r1, &(0x7f0000fcc000/0x3000)=nil, 0x5000)
mprotect(&(0x7f00006cb000/0x2000)=nil, 0x2000, 0x4)
mbind(&(0x7f0000b0e000/0x1000)=nil, 0x1000, 0x8000, &(0x7f00000002c0)=0x445, 0x6, 0x4)
get_mempolicy(&(0x7f0000000300), &(0x7f0000000340), 0xfffffffeffffffff, &(0x7f00005f7000/0x10000)=nil, 0x1)
mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
mremap(&(0x7f0000e7c000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffb000/0x3000)=nil)

[  152.560674] random: crng reseeded on system resumption
[  152.567645] Restarting kernel threads ... done.
23:48:35 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000380)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x30, 0x0, "1011a0f43c11e86a574d766a1efd9908dc1c90f8fe673d0908cfc77225c692dd6bf732e61aee79338afe49c997640ced87bf14b3f8e2a6d3e16f781eca700764f98d8da9770fc49e9847cee080999f6d"}, 0xd8)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, "146976cb538f0ac2bdc7cce9987b499b7640615a46b47ec5bac700000000000000df8ee9168816767bf98aec6d90baf94ac765d2e245ec4c20c107f4a43d09c35ba25e531d6007de5efe70856cffb5cd"}, 0xd8)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000040)={@in={{0x2, 0x0, @local}}, 0x0, 0x0, 0x3f, 0x0, "2d2b29f148803297e2c23876885750648cb9e9318a9bac16185b908b372553ea2f942b4c613ef644a127f5733159a2b61334185eb18259802142bd9e4e9d01702eec026ed4fef1400f4902a759ff2191"}, 0xd8)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x4e22, 0x8, @empty, 0x4}}, 0x0, 0x0, 0x4f, 0x0, "dc27c779e233e04e0611d0d1b6f9b6003495090e10c64ae4ccd7f0cab78379e223ff63386f28af93cb00be6d4d8b24dd2e9710406168faa2fa05c0ebff580eecd4364c2e300becc8484b187f2de2a86e"}, 0xd8)

23:48:35 executing program 5:
prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffe000/0x2000)=nil)
mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000000)=0x80000000, 0x20, 0x4)
mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x6000, 0x2, &(0x7f0000ffa000/0x6000)=nil)
madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xd)
mbind(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, &(0x7f0000000040)=0x7f, 0x6, 0x2)
shmat(0xffffffffffffffff, &(0x7f0000850000/0x4000)=nil, 0x1000)
move_pages(0xffffffffffffffff, 0x8, &(0x7f0000000080)=[&(0x7f0000d82000/0x1000)=nil, &(0x7f0000a04000/0x2000)=nil, &(0x7f0000fe9000/0x14000)=nil, &(0x7f0000c61000/0xe000)=nil, &(0x7f0000cf8000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f00003fd000/0xc00000)=nil, &(0x7f0000970000/0x2000)=nil], &(0x7f00000000c0)=[0x1, 0x4, 0x4, 0x200, 0x80000001], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x2)
r0 = syz_open_dev$vcsa(&(0x7f0000000140), 0x17, 0x400)
mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0)
mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil)
mbind(&(0x7f0000ea9000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000180), 0x2, 0x1)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0, &(0x7f00000001c0)=0x80, &(0x7f0000000200)=@hci, 0x0, 0x800, 0x1}, 0x9)
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil)
shmat(r1, &(0x7f0000fcc000/0x3000)=nil, 0x5000)
mprotect(&(0x7f00006cb000/0x2000)=nil, 0x2000, 0x4)
mbind(&(0x7f0000b0e000/0x1000)=nil, 0x1000, 0x8000, &(0x7f00000002c0)=0x445, 0x6, 0x4)
get_mempolicy(&(0x7f0000000300), &(0x7f0000000340), 0xfffffffeffffffff, &(0x7f00005f7000/0x10000)=nil, 0x1)
mremap(&(0x7f0000e7c000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffb000/0x3000)=nil)

23:48:35 executing program 2:
setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, &(0x7f0000000000)={0xfd, {{0x2, 0x4e22, @local}}}, 0x88)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, &(0x7f00000000c0)={0x7, 'nr0\x00', {0xed}, 0x3})
r1 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000100))
recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000140)=@alg, 0x80, &(0x7f0000000400)=[{&(0x7f00000001c0)=""/35, 0x23}, {&(0x7f0000000200)=""/168, 0xa8}, {&(0x7f00000002c0)=""/106, 0x6a}, {&(0x7f0000000340)=""/139, 0x8b}], 0x4, &(0x7f0000000440)=""/147, 0x93}, 0x400021c2)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8983, &(0x7f0000000540)={0x7, 'veth0_to_hsr\x00', {0x1}, 0x4})
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000580)={{0x1, 0x1, 0x18, <r3=>r2, {0x7fffffff}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f00000005c0)={{0x1, 0x1, 0x18, <r4=>r0, {0x7fff}}, './file0\x00'})
getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000600)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000700)=0xe8)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000740)={{0x1, 0x1, 0x18, r4, {r5, 0xffffffffffffffff}}, './file0\x00'})
getsockopt$sock_buf(r1, 0x1, 0x3d, &(0x7f0000000780)=""/135, &(0x7f0000000840)=0x87)
socket$packet(0x11, 0x3, 0x300)
preadv2(r3, &(0x7f0000000940)=[{&(0x7f0000000880)=""/181, 0xb5}], 0x1, 0xffffffff, 0x384, 0x4)
r6 = accept$inet(r3, &(0x7f0000000980)={0x2, 0x0, @local}, &(0x7f00000009c0)=0x10)
getsockopt$IP_SET_OP_GET_FNAME(r6, 0x1, 0x53, &(0x7f0000000a00)={0x8, 0x7, 0x0, 'syz1\x00'}, &(0x7f0000000a40)=0x2c)
r7 = fsmount(r4, 0x1, 0x89)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r7, 0x89fa, &(0x7f0000000b00)={'ip6_vti0\x00', &(0x7f0000000a80)={'ip6tnl0\x00', 0x0, 0x4, 0x9, 0x91, 0x8, 0x18, @ipv4={'\x00', '\xff\xff', @empty}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000, 0x20, 0x7fffffff}})
ioctl$INCFS_IOC_CREATE_FILE(r7, 0xc058671e, &(0x7f0000000f40)={{'\x00', 0x4}, {0xffffffff}, 0x58, 0x0, 0x0, &(0x7f0000000b40)='./file0\x00', &(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)="932def41dc14f019d4b7c595721f2768416bd3e283140a94953aeabf3190ff601397d12bc4cdb109d2e6cb2c527e1e10a46b79716d4327f883bc0ca9097ac58c6ead7b6f23855ad9765e7c650715861d102215bc136658d75a8ae952838337ccc7ffc17a9ba3014bfa1f55d2ca242f83d66091217ef14565782a198f13b15746e3e28fb45b6e49e6393d5e0a7dde22c3dab7065608d29cdb9ff2dd0856b70602b861e8f494c6bf6876c23dac06a702fe9582d252c709b58dc2e499428c7306adc48a78ce2c571af82b77a352a3f774c2af2869ab75ae9e6f9f72d83f984fff3abed4c1138ec574038c7f1ddd66470caaccbbc53acc76967a35cc02bd84b705883ddd14cf6379bf30ba9d63b0c019cbf47b9034d80020e3e909c7a222bf98fc7573e4d64eba81a362ce30dc5a93673df9e5aaac387c59aa9ef8e47f92b1c814af8a49641ef6fdf497ce702d73bfc1390cd4b12c49bd9c739582ee88d00f", 0x15d, 0x0, &(0x7f0000000d40)={0x2, 0x149, {0x0, 0xc, 0x4c, "10c2257806ef69eb2c2ac5e4edafa76054645ddf8d9d61bdf47266272b20c9d77f360f0c9fc2fba12fb0315bdf0e536e3f6043a4c946aacfed998313796b3a781b8ed2ad375fd7b1f67004c3", 0xf0, "03ac9e0decbfdc08a5d0ef544e09eab65b9a3ebc3e7962c6d37f2ab7e85e9728fe6e6c4b4800f92b85006cef5b6a0397bd66caa0b6f2815cab7d8852b055aef56b1519ced532375cd8226ee04278c5dfffda8ef5bb3b4fdcddc9245581b25377f2a1e6c6f3506cf0903335302473123eee311b66a7c6da124b6352882a6e6ab69e12b1f33704b3883d28be1c4a8e147eebe5bd98fb8b1061adb619bd48c633385841785442aa62308c5dc01e45cc3ac3f3095eadb5474d4783fbef379219db369428601a57bbb2f0ae9a7c2c8ad97bbfda6b2d056d2fc558cab33c13830a92a491371aa62f92c8ab6c051cf43d9f085a"}, 0x76, "f4993aba0345abb2e573b793368f274ddf73662d3721b25a342d3dccc20a6b9e4f9f59e6de32da70f41ed725697bd8da8b8322b6a47c56e63181fdcb4027dc5addb631813d573602df8fb2362209edc639677b56e45e6402348f5469b796ea00dcd9364bf57508dfc970ded8fa9731c7e444837d1fe9"}, 0x1cb})
bind(r2, &(0x7f0000000fc0)=@generic={0xa, "2aaaf2d39c7be963e0b9d54738b252e3b351c2e8432bc92cd726f7c484d166a470cbc71649dab8b75b54123057131f316d1e4585a44707bbba3785fd48c5e14d768b13c05c6f9bf3294297be0fef694394ecac05fdb2854ea9037d26eb8e4b4202b925708327f857c4d7a4651445ea7b7c51c20d54f7c287340f3efd03f5"}, 0x80)

[  152.823205] hrtimer: interrupt took 16030 ns
[  153.121740] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[  153.122706] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] 
[  153.123579] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present
[  153.124254] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00
[  153.125004] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2
[  153.130597] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  153.131773] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  153.132944] Buffer I/O error on dev sr0, logical block 0, async page read
[  153.152105] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  153.153298] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  153.154663] Buffer I/O error on dev sr0, logical block 1, async page read
[  153.155976] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  153.156945] I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 6 prio class 2
[  153.158307] Buffer I/O error on dev sr0, logical block 2, async page read
[  153.159495] Buffer I/O error on dev sr0, logical block 3, async page read
[  153.160330] Buffer I/O error on dev sr0, logical block 4, async page read
[  153.160844] Buffer I/O error on dev sr0, logical block 5, async page read
[  153.161343] Buffer I/O error on dev sr0, logical block 6, async page read
[  153.161854] Buffer I/O error on dev sr0, logical block 7, async page read
23:48:44 executing program 6:
mlock2(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c0e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x3)
ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000040)=0x2)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x90c83, 0x0)
finit_module(r1, &(0x7f0000000100)='/,*\x00', 0x3)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='smaps_rollup\x00')
perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x0, 0x80, 0x1, 0x3f, 0x0, 0x2, 0x86002, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x8}, 0x88, 0x1, 0x4, 0x8, 0x1, 0x3f, 0x7fff, 0x0, 0x8, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3)
dup3(r2, 0xffffffffffffffff, 0x80000)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0xfa, 0x0, 0x0, 0xff, 0x0, 0x1000022, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x5}, 0x10, 0x0, 0x8, 0x0, 0x4, 0x0, 0x40}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x2)
openat2(r2, &(0x7f0000000240)='./file1\x00', &(0x7f0000000300)={0xa4e02, 0x21, 0x1b}, 0x18)
r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4)
r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0)
ioctl$SNAPSHOT_FREE(r5, 0x3305)
mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x1000, 0x7, &(0x7f0000fff000/0x1000)=nil)
mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil)

23:48:44 executing program 0:
prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffe000/0x2000)=nil)
mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000000)=0x80000000, 0x20, 0x4)
mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x6000, 0x2, &(0x7f0000ffa000/0x6000)=nil)
madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xd)
mbind(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, &(0x7f0000000040)=0x7f, 0x6, 0x2)
shmat(0xffffffffffffffff, &(0x7f0000850000/0x4000)=nil, 0x1000)
move_pages(0xffffffffffffffff, 0x8, &(0x7f0000000080)=[&(0x7f0000d82000/0x1000)=nil, &(0x7f0000a04000/0x2000)=nil, &(0x7f0000fe9000/0x14000)=nil, &(0x7f0000c61000/0xe000)=nil, &(0x7f0000cf8000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f00003fd000/0xc00000)=nil, &(0x7f0000970000/0x2000)=nil], &(0x7f00000000c0)=[0x1, 0x4, 0x4, 0x200, 0x80000001], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x2)
r0 = syz_open_dev$vcsa(&(0x7f0000000140), 0x17, 0x400)
mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0)
mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil)
mbind(&(0x7f0000ea9000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000180), 0x2, 0x1)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0, &(0x7f00000001c0)=0x80, &(0x7f0000000200)=@hci, 0x0, 0x800, 0x1}, 0x9)
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil)
shmat(r1, &(0x7f0000fcc000/0x3000)=nil, 0x5000)
mprotect(&(0x7f00006cb000/0x2000)=nil, 0x2000, 0x4)
mbind(&(0x7f0000b0e000/0x1000)=nil, 0x1000, 0x8000, &(0x7f00000002c0)=0x445, 0x6, 0x4)
get_mempolicy(&(0x7f0000000300), &(0x7f0000000340), 0xfffffffeffffffff, &(0x7f00005f7000/0x10000)=nil, 0x1)
mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
mremap(&(0x7f0000e7c000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffb000/0x3000)=nil)

23:48:44 executing program 5:
prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffe000/0x2000)=nil)
mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000000)=0x80000000, 0x20, 0x4)
mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x6000, 0x2, &(0x7f0000ffa000/0x6000)=nil)
madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xd)
mbind(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, &(0x7f0000000040)=0x7f, 0x6, 0x2)
shmat(0xffffffffffffffff, &(0x7f0000850000/0x4000)=nil, 0x1000)
move_pages(0xffffffffffffffff, 0x8, &(0x7f0000000080)=[&(0x7f0000d82000/0x1000)=nil, &(0x7f0000a04000/0x2000)=nil, &(0x7f0000fe9000/0x14000)=nil, &(0x7f0000c61000/0xe000)=nil, &(0x7f0000cf8000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f00003fd000/0xc00000)=nil, &(0x7f0000970000/0x2000)=nil], &(0x7f00000000c0)=[0x1, 0x4, 0x4, 0x200, 0x80000001], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x2)
r0 = syz_open_dev$vcsa(&(0x7f0000000140), 0x17, 0x400)
mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0)
mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil)
mbind(&(0x7f0000ea9000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000180), 0x2, 0x1)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0, &(0x7f00000001c0)=0x80, &(0x7f0000000200)=@hci, 0x0, 0x800, 0x1}, 0x9)
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil)
shmat(r1, &(0x7f0000fcc000/0x3000)=nil, 0x5000)
mprotect(&(0x7f00006cb000/0x2000)=nil, 0x2000, 0x4)
mbind(&(0x7f0000b0e000/0x1000)=nil, 0x1000, 0x8000, &(0x7f00000002c0)=0x445, 0x6, 0x4)
get_mempolicy(&(0x7f0000000300), &(0x7f0000000340), 0xfffffffeffffffff, &(0x7f00005f7000/0x10000)=nil, 0x1)
mremap(&(0x7f0000e7c000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffb000/0x3000)=nil)

23:48:44 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000380)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x30, 0x0, "1011a0f43c11e86a574d766a1efd9908dc1c90f8fe673d0908cfc77225c692dd6bf732e61aee79338afe49c997640ced87bf14b3f8e2a6d3e16f781eca700764f98d8da9770fc49e9847cee080999f6d"}, 0xd8)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, "146976cb538f0ac2bdc7cce9987b499b7640615a46b47ec5bac700000000000000df8ee9168816767bf98aec6d90baf94ac765d2e245ec4c20c107f4a43d09c35ba25e531d6007de5efe70856cffb5cd"}, 0xd8)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000040)={@in={{0x2, 0x0, @local}}, 0x0, 0x0, 0x3f, 0x0, "2d2b29f148803297e2c23876885750648cb9e9318a9bac16185b908b372553ea2f942b4c613ef644a127f5733159a2b61334185eb18259802142bd9e4e9d01702eec026ed4fef1400f4902a759ff2191"}, 0xd8)

23:48:44 executing program 2:
setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, &(0x7f0000000000)={0xfd, {{0x2, 0x4e22, @local}}}, 0x88)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, &(0x7f00000000c0)={0x7, 'nr0\x00', {0xed}, 0x3})
r1 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000100))
recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000140)=@alg, 0x80, &(0x7f0000000400)=[{&(0x7f00000001c0)=""/35, 0x23}, {&(0x7f0000000200)=""/168, 0xa8}, {&(0x7f00000002c0)=""/106, 0x6a}, {&(0x7f0000000340)=""/139, 0x8b}], 0x4, &(0x7f0000000440)=""/147, 0x93}, 0x400021c2)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8983, &(0x7f0000000540)={0x7, 'veth0_to_hsr\x00', {0x1}, 0x4})
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000580)={{0x1, 0x1, 0x18, <r3=>r2, {0x7fffffff}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f00000005c0)={{0x1, 0x1, 0x18, <r4=>r0, {0x7fff}}, './file0\x00'})
getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000600)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000700)=0xe8)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000740)={{0x1, 0x1, 0x18, r4, {r5, 0xffffffffffffffff}}, './file0\x00'})
getsockopt$sock_buf(r1, 0x1, 0x3d, &(0x7f0000000780)=""/135, &(0x7f0000000840)=0x87)
socket$packet(0x11, 0x3, 0x300)
preadv2(r3, &(0x7f0000000940)=[{&(0x7f0000000880)=""/181, 0xb5}], 0x1, 0xffffffff, 0x384, 0x4)
r6 = accept$inet(r3, &(0x7f0000000980)={0x2, 0x0, @local}, &(0x7f00000009c0)=0x10)
getsockopt$IP_SET_OP_GET_FNAME(r6, 0x1, 0x53, &(0x7f0000000a00)={0x8, 0x7, 0x0, 'syz1\x00'}, &(0x7f0000000a40)=0x2c)
r7 = fsmount(r4, 0x1, 0x89)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r7, 0x89fa, &(0x7f0000000b00)={'ip6_vti0\x00', &(0x7f0000000a80)={'ip6tnl0\x00', 0x0, 0x4, 0x9, 0x91, 0x8, 0x18, @ipv4={'\x00', '\xff\xff', @empty}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000, 0x20, 0x7fffffff}})
bind(r2, &(0x7f0000000fc0)=@generic={0xa, "2aaaf2d39c7be963e0b9d54738b252e3b351c2e8432bc92cd726f7c484d166a470cbc71649dab8b75b54123057131f316d1e4585a44707bbba3785fd48c5e14d768b13c05c6f9bf3294297be0fef694394ecac05fdb2854ea9037d26eb8e4b4202b925708327f857c4d7a4651445ea7b7c51c20d54f7c287340f3efd03f5"}, 0x80)

23:48:44 executing program 1:
syz_genetlink_get_family_id$gtp(&(0x7f0000000000), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0)
recvmmsg(r0, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000005500), r0)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="48001200", @ANYRES16=0x0, @ANYBLOB="000329bd7000ffdbdf257f00000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990006000000300000000a0034000202020202020000140055009da71febaa1372e2821a1dfe98d83475"], 0x48}, 0x1, 0x0, 0x0, 0x5}, 0x41)
r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
write$tcp_congestion(r1, &(0x7f0000000080)='bbr\x00', 0x4)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0)
recvmmsg(r2, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000005500), r2)
syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r2)
connect$netlink(r0, &(0x7f0000000240)=@proc={0x10, 0x0, 0x25dfdbfe, 0x4000}, 0xc)

23:48:44 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000007c0), 0x2}, 0xcc80, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0)
r1 = syz_io_uring_setup(0x4cdd, &(0x7f0000000140)={0x0, 0x6c4c, 0x10, 0x2, 0x213}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000300))
syz_io_uring_setup(0x2c86, &(0x7f0000000600)={0x0, 0x0, 0x2, 0x2, 0x213}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000680), &(0x7f0000000800))
r2 = syz_io_uring_setup(0x3740, &(0x7f0000000700)={0x0, 0x573c, 0x4, 0x3, 0x309, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000340))
getpid()
syz_io_uring_setup(0xf95, &(0x7f00000004c0)={0x0, 0x23d1, 0x20, 0x3, 0x316, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580))
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x2)
r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r3, 0x0)
ftruncate(r1, 0xfffffffffffffff7)
openat(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x100000, 0x95)
close(r3)
syz_io_uring_setup(0xaaf, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000380))
finit_module(r0, 0x0, 0x0)
syz_io_uring_setup(0x5e00, &(0x7f0000000840)={0x0, 0x595c, 0x10, 0x1, 0xff}, &(0x7f0000ffa000/0x6000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000008c0), &(0x7f0000000900))
syz_io_uring_setup(0x5787, &(0x7f0000000400)={0x0, 0x700f, 0x0, 0x3, 0x28a, 0x0, r2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000005c0))

23:48:44 executing program 4:
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x684, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1a}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000200))
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
mmap$perf(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x50, r0, 0x3)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r2)
r3 = socket$inet6(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
sendmsg$unix(r4, &(0x7f00000008c0)={&(0x7f0000000740)=@abs, 0x6e, 0x0}, 0x20008084)
ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82)
process_vm_readv(0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000000100)=""/57, 0x39}], 0x2, &(0x7f0000000300)=[{&(0x7f0000012940)=""/102400, 0x19000}, {0x0}], 0x2, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100cf0018800000", @ANYRES32=<r6=>0xffffffffffffffff, @ANYBLOB="6eec00ffff0000ffffffff686c653100"])
write$P9_RLCREATE(r6, &(0x7f0000000180)={0x18, 0xf, 0x1, {{0x10, 0x3, 0x7}, 0x9f}}, 0x18)
r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/block/loop6', 0x80400, 0x10)
pwritev(r5, &(0x7f0000000240)=[{&(0x7f0000000140)="cf", 0x1}], 0x1, 0x0, 0x0)
r8 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0)
ioctl$SG_IO(r8, 0x5392, &(0x7f0000000240)={0x53, 0xfffffffffffffffb, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r7, 0xc08c5334, &(0x7f0000000340)={0x7ff, 0x1, 0x1, 'queue1\x00', 0x7})

[  161.631505] random: crng reseeded on system resumption
[  161.643756] Restarting kernel threads ... done.
23:48:44 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000380)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x30, 0x0, "1011a0f43c11e86a574d766a1efd9908dc1c90f8fe673d0908cfc77225c692dd6bf732e61aee79338afe49c997640ced87bf14b3f8e2a6d3e16f781eca700764f98d8da9770fc49e9847cee080999f6d"}, 0xd8)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, "146976cb538f0ac2bdc7cce9987b499b7640615a46b47ec5bac700000000000000df8ee9168816767bf98aec6d90baf94ac765d2e245ec4c20c107f4a43d09c35ba25e531d6007de5efe70856cffb5cd"}, 0xd8)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000040)={@in={{0x2, 0x0, @local}}, 0x0, 0x0, 0x3f, 0x0, "2d2b29f148803297e2c23876885750648cb9e9318a9bac16185b908b372553ea2f942b4c613ef644a127f5733159a2b61334185eb18259802142bd9e4e9d01702eec026ed4fef1400f4902a759ff2191"}, 0xd8)

23:48:44 executing program 5:
prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffe000/0x2000)=nil)
mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000000)=0x80000000, 0x20, 0x4)
mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x6000, 0x2, &(0x7f0000ffa000/0x6000)=nil)
madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xd)
mbind(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, &(0x7f0000000040)=0x7f, 0x6, 0x2)
shmat(0xffffffffffffffff, &(0x7f0000850000/0x4000)=nil, 0x1000)
move_pages(0xffffffffffffffff, 0x8, &(0x7f0000000080)=[&(0x7f0000d82000/0x1000)=nil, &(0x7f0000a04000/0x2000)=nil, &(0x7f0000fe9000/0x14000)=nil, &(0x7f0000c61000/0xe000)=nil, &(0x7f0000cf8000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f00003fd000/0xc00000)=nil, &(0x7f0000970000/0x2000)=nil], &(0x7f00000000c0)=[0x1, 0x4, 0x4, 0x200, 0x80000001], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x2)
r0 = syz_open_dev$vcsa(&(0x7f0000000140), 0x17, 0x400)
mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0)
mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil)
mbind(&(0x7f0000ea9000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000180), 0x2, 0x1)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0, &(0x7f00000001c0)=0x80, &(0x7f0000000200)=@hci, 0x0, 0x800, 0x1}, 0x9)
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil)
shmat(r1, &(0x7f0000fcc000/0x3000)=nil, 0x5000)
mprotect(&(0x7f00006cb000/0x2000)=nil, 0x2000, 0x4)
mbind(&(0x7f0000b0e000/0x1000)=nil, 0x1000, 0x8000, &(0x7f00000002c0)=0x445, 0x6, 0x4)
get_mempolicy(&(0x7f0000000300), &(0x7f0000000340), 0xfffffffeffffffff, &(0x7f00005f7000/0x10000)=nil, 0x1)
mremap(&(0x7f0000e7c000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffb000/0x3000)=nil)

23:48:44 executing program 0:
prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffe000/0x2000)=nil)
mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000000)=0x80000000, 0x20, 0x4)
mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x6000, 0x2, &(0x7f0000ffa000/0x6000)=nil)
madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xd)
mbind(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, &(0x7f0000000040)=0x7f, 0x6, 0x2)
shmat(0xffffffffffffffff, &(0x7f0000850000/0x4000)=nil, 0x1000)
move_pages(0xffffffffffffffff, 0x8, &(0x7f0000000080)=[&(0x7f0000d82000/0x1000)=nil, &(0x7f0000a04000/0x2000)=nil, &(0x7f0000fe9000/0x14000)=nil, &(0x7f0000c61000/0xe000)=nil, &(0x7f0000cf8000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f00003fd000/0xc00000)=nil, &(0x7f0000970000/0x2000)=nil], &(0x7f00000000c0)=[0x1, 0x4, 0x4, 0x200, 0x80000001], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x2)
r0 = syz_open_dev$vcsa(&(0x7f0000000140), 0x17, 0x400)
mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0)
mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil)
mbind(&(0x7f0000ea9000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000180), 0x2, 0x1)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0, &(0x7f00000001c0)=0x80, &(0x7f0000000200)=@hci, 0x0, 0x800, 0x1}, 0x9)
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil)
shmat(r1, &(0x7f0000fcc000/0x3000)=nil, 0x5000)
mprotect(&(0x7f00006cb000/0x2000)=nil, 0x2000, 0x4)
mbind(&(0x7f0000b0e000/0x1000)=nil, 0x1000, 0x8000, &(0x7f00000002c0)=0x445, 0x6, 0x4)
get_mempolicy(&(0x7f0000000300), &(0x7f0000000340), 0xfffffffeffffffff, &(0x7f00005f7000/0x10000)=nil, 0x1)
mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000)

23:48:44 executing program 6:
syz_genetlink_get_family_id$gtp(&(0x7f0000000000), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0)
recvmmsg(r0, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000005500), r0)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="48001200", @ANYRES16=0x0, @ANYBLOB="000329bd7000ffdbdf257f00000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990006000000300000000a0034000202020202020000140055009da71febaa1372e2821a1dfe98d83475"], 0x48}, 0x1, 0x0, 0x0, 0x5}, 0x41)
r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
write$tcp_congestion(r1, &(0x7f0000000080)='bbr\x00', 0x4)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0)
recvmmsg(r2, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000005500), r2)
syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r2)
connect$netlink(r0, &(0x7f0000000240)=@proc={0x10, 0x0, 0x25dfdbfe, 0x4000}, 0xc)

23:48:44 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000380)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x30, 0x0, "1011a0f43c11e86a574d766a1efd9908dc1c90f8fe673d0908cfc77225c692dd6bf732e61aee79338afe49c997640ced87bf14b3f8e2a6d3e16f781eca700764f98d8da9770fc49e9847cee080999f6d"}, 0xd8)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, "146976cb538f0ac2bdc7cce9987b499b7640615a46b47ec5bac700000000000000df8ee9168816767bf98aec6d90baf94ac765d2e245ec4c20c107f4a43d09c35ba25e531d6007de5efe70856cffb5cd"}, 0xd8)

23:48:44 executing program 2:
setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, &(0x7f0000000000)={0xfd, {{0x2, 0x4e22, @local}}}, 0x88)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, &(0x7f00000000c0)={0x7, 'nr0\x00', {0xed}, 0x3})
r1 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000100))
recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000140)=@alg, 0x80, &(0x7f0000000400)=[{&(0x7f00000001c0)=""/35, 0x23}, {&(0x7f0000000200)=""/168, 0xa8}, {&(0x7f00000002c0)=""/106, 0x6a}, {&(0x7f0000000340)=""/139, 0x8b}], 0x4, &(0x7f0000000440)=""/147, 0x93}, 0x400021c2)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8983, &(0x7f0000000540)={0x7, 'veth0_to_hsr\x00', {0x1}, 0x4})
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000580)={{0x1, 0x1, 0x18, <r3=>r2, {0x7fffffff}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f00000005c0)={{0x1, 0x1, 0x18, <r4=>r0, {0x7fff}}, './file0\x00'})
getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000600)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000700)=0xe8)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000740)={{0x1, 0x1, 0x18, r4, {r5, 0xffffffffffffffff}}, './file0\x00'})
getsockopt$sock_buf(r1, 0x1, 0x3d, &(0x7f0000000780)=""/135, &(0x7f0000000840)=0x87)
socket$packet(0x11, 0x3, 0x300)
preadv2(r3, &(0x7f0000000940)=[{&(0x7f0000000880)=""/181, 0xb5}], 0x1, 0xffffffff, 0x384, 0x4)
r6 = accept$inet(r3, &(0x7f0000000980)={0x2, 0x0, @local}, &(0x7f00000009c0)=0x10)
getsockopt$IP_SET_OP_GET_FNAME(r6, 0x1, 0x53, &(0x7f0000000a00)={0x8, 0x7, 0x0, 'syz1\x00'}, &(0x7f0000000a40)=0x2c)
fsmount(r4, 0x1, 0x89)
bind(r2, &(0x7f0000000fc0)=@generic={0xa, "2aaaf2d39c7be963e0b9d54738b252e3b351c2e8432bc92cd726f7c484d166a470cbc71649dab8b75b54123057131f316d1e4585a44707bbba3785fd48c5e14d768b13c05c6f9bf3294297be0fef694394ecac05fdb2854ea9037d26eb8e4b4202b925708327f857c4d7a4651445ea7b7c51c20d54f7c287340f3efd03f5"}, 0x80)

23:48:44 executing program 5:
prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffe000/0x2000)=nil)
mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000000)=0x80000000, 0x20, 0x4)
mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x6000, 0x2, &(0x7f0000ffa000/0x6000)=nil)
madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xd)
mbind(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, &(0x7f0000000040)=0x7f, 0x6, 0x2)
shmat(0xffffffffffffffff, &(0x7f0000850000/0x4000)=nil, 0x1000)
move_pages(0xffffffffffffffff, 0x8, &(0x7f0000000080)=[&(0x7f0000d82000/0x1000)=nil, &(0x7f0000a04000/0x2000)=nil, &(0x7f0000fe9000/0x14000)=nil, &(0x7f0000c61000/0xe000)=nil, &(0x7f0000cf8000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f00003fd000/0xc00000)=nil, &(0x7f0000970000/0x2000)=nil], &(0x7f00000000c0)=[0x1, 0x4, 0x4, 0x200, 0x80000001], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x2)
r0 = syz_open_dev$vcsa(&(0x7f0000000140), 0x17, 0x400)
mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0)
mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil)
mbind(&(0x7f0000ea9000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000180), 0x2, 0x1)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0, &(0x7f00000001c0)=0x80, &(0x7f0000000200)=@hci, 0x0, 0x800, 0x1}, 0x9)
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil)
shmat(r1, &(0x7f0000fcc000/0x3000)=nil, 0x5000)
mprotect(&(0x7f00006cb000/0x2000)=nil, 0x2000, 0x4)
mbind(&(0x7f0000b0e000/0x1000)=nil, 0x1000, 0x8000, &(0x7f00000002c0)=0x445, 0x6, 0x4)
mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
mremap(&(0x7f0000e7c000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffb000/0x3000)=nil)

23:48:44 executing program 0:
prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffe000/0x2000)=nil)
mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000000)=0x80000000, 0x20, 0x4)
mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x6000, 0x2, &(0x7f0000ffa000/0x6000)=nil)
madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xd)
mbind(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, &(0x7f0000000040)=0x7f, 0x6, 0x2)
shmat(0xffffffffffffffff, &(0x7f0000850000/0x4000)=nil, 0x1000)
move_pages(0xffffffffffffffff, 0x8, &(0x7f0000000080)=[&(0x7f0000d82000/0x1000)=nil, &(0x7f0000a04000/0x2000)=nil, &(0x7f0000fe9000/0x14000)=nil, &(0x7f0000c61000/0xe000)=nil, &(0x7f0000cf8000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f00003fd000/0xc00000)=nil, &(0x7f0000970000/0x2000)=nil], &(0x7f00000000c0)=[0x1, 0x4, 0x4, 0x200, 0x80000001], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x2)
r0 = syz_open_dev$vcsa(&(0x7f0000000140), 0x17, 0x400)
mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0)
mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil)
mbind(&(0x7f0000ea9000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000180), 0x2, 0x1)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0, &(0x7f00000001c0)=0x80, &(0x7f0000000200)=@hci, 0x0, 0x800, 0x1}, 0x9)
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil)
shmat(r1, &(0x7f0000fcc000/0x3000)=nil, 0x5000)
mprotect(&(0x7f00006cb000/0x2000)=nil, 0x2000, 0x4)
mbind(&(0x7f0000b0e000/0x1000)=nil, 0x1000, 0x8000, &(0x7f00000002c0)=0x445, 0x6, 0x4)
mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000)

23:48:44 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, "146976cb538f0ac2bdc7cce9987b499b7640615a46b47ec5bac700000000000000df8ee9168816767bf98aec6d90baf94ac765d2e245ec4c20c107f4a43d09c35ba25e531d6007de5efe70856cffb5cd"}, 0xd8)

23:48:44 executing program 4:
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x684, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1a}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000200))
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
mmap$perf(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x50, r0, 0x3)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r2)
r3 = socket$inet6(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
sendmsg$unix(r4, &(0x7f00000008c0)={&(0x7f0000000740)=@abs, 0x6e, 0x0}, 0x20008084)
ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82)
process_vm_readv(0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000000100)=""/57, 0x39}], 0x2, &(0x7f0000000300)=[{&(0x7f0000012940)=""/102400, 0x19000}, {0x0}], 0x2, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100cf0018800000", @ANYRES32=<r6=>0xffffffffffffffff, @ANYBLOB="6eec00ffff0000ffffffff686c653100"])
write$P9_RLCREATE(r6, &(0x7f0000000180)={0x18, 0xf, 0x1, {{0x10, 0x3, 0x7}, 0x9f}}, 0x18)
r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/block/loop6', 0x80400, 0x10)
pwritev(r5, &(0x7f0000000240)=[{&(0x7f0000000140)="cf", 0x1}], 0x1, 0x0, 0x0)
r8 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0)
ioctl$SG_IO(r8, 0x5392, &(0x7f0000000240)={0x53, 0xfffffffffffffffb, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r7, 0xc08c5334, &(0x7f0000000340)={0x7ff, 0x1, 0x1, 'queue1\x00', 0x7})

23:48:44 executing program 0:
prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffe000/0x2000)=nil)
mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000000)=0x80000000, 0x20, 0x4)
mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x6000, 0x2, &(0x7f0000ffa000/0x6000)=nil)
madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xd)
mbind(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, &(0x7f0000000040)=0x7f, 0x6, 0x2)
shmat(0xffffffffffffffff, &(0x7f0000850000/0x4000)=nil, 0x1000)
move_pages(0xffffffffffffffff, 0x8, &(0x7f0000000080)=[&(0x7f0000d82000/0x1000)=nil, &(0x7f0000a04000/0x2000)=nil, &(0x7f0000fe9000/0x14000)=nil, &(0x7f0000c61000/0xe000)=nil, &(0x7f0000cf8000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f00003fd000/0xc00000)=nil, &(0x7f0000970000/0x2000)=nil], &(0x7f00000000c0)=[0x1, 0x4, 0x4, 0x200, 0x80000001], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x2)
r0 = syz_open_dev$vcsa(&(0x7f0000000140), 0x17, 0x400)
mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0)
mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil)
mbind(&(0x7f0000ea9000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000180), 0x2, 0x1)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0, &(0x7f00000001c0)=0x80, &(0x7f0000000200)=@hci, 0x0, 0x800, 0x1}, 0x9)
r1 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil)
shmat(r1, &(0x7f0000fcc000/0x3000)=nil, 0x5000)
mprotect(&(0x7f00006cb000/0x2000)=nil, 0x2000, 0x4)
mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000)


VM DIAGNOSIS:
23:48:35  Registers:
info registers vcpu 0
RAX=0000000000000031 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff822b17e1 RDI=ffffffff87645be0 RBP=ffffffff87645ba0 RSP=ffff888041b97698
R8 =0000000000000001 R9 =000000000000000a R10=0000000000000031 R11=0000000000000001
R12=0000000000000031 R13=ffffffff87645ba0 R14=0000000000000010 R15=ffffffff822b17d0
RIP=ffffffff822b1839 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f5bc160c700 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffe102f2438 CR3=000000001e108000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM01=0000000000000000 0000000000000000 00007f5bc417d7c0 00007f5bc417d7c8
YMM02=0000000000000000 0000000000000000 00007f5bc417d7e0 00007f5bc417d7c0
YMM03=0000000000000000 0000000000000000 00007f5bc417d7c8 00007f5bc417d7c0
YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000
YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245
YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040
YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1
RAX=0000000000000058 RBX=ffff88800f8a0000 RCX=0000000000000000 RDX=0000000000010177
RSI=ffffffff83ffe657 RDI=0000000000000007 RBP=ffff88800f8a00b8 RSP=ffff888018577c80
R8 =0000000000000007 R9 =0000000000010000 R10=0000000000010177 R11=0000000000000001
R12=0000000000010177 R13=ffff88800f8a0000 R14=ffffed1001f14001 R15=ffffffff857efd40
RIP=ffffffff83ffe65b RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f8a140551f0 CR3=0000000008716000 CR4=00350ee0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM01=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff
YMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM04=0000000000000000 0000000000000000 0000000000000000 00000000000000ff
YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245
YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040
YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000